Cyberattack Crisis Simulation

Under the NIS2 Implementation Act of November 2025, regular crisis drills are mandatory for critical and highly critical facilities. Evidence of these drills must be provided both as part of standard due diligence obligations and to meet compliance requirements.

Fraunhofer SIT offers organizations the opportunity to conduct such crisis simulations with expert preparation and support. When managing crisis situations, sector-specific requirements must also be taken into account. For this reason, Fraunhofer SIT offers sector-specific crisis simulations.

Crisis Simulation for Cyberattacks on Hospitals
This crisis simulation specifically addresses the unique challenges hospitals face when managing a cyberattack. Fraunhofer SIT possesses extensive expertise in the field of cybersecurity in hospitals. The crisis simulation also takes into account the specific circumstances of the respective client. Only members of an organization’s crisis management team participate in a crisis simulation for hospitals. The date for conducting the crisis simulation is determined in consultation with the respective organization. The following key points apply:

• Start of simulation planning: at least approximately 8 weeks before the crisis exercise
• Conduct of the crisis exercise on-site at the client’s location: 0.5–1 day
• Follow-up to the crisis exercise: Documentation up to approximately 4 weeks after the crisis exercise
• The cost of a crisis simulation depends on the scope of work required by the respective client.

If you are interested in a crisis simulation focusing on cyberattacks on hospitals, please contact us at .

In the future, we will also offer crisis simulations for other industries.