Conference Description
Key Takeaways
- Multi-day summit focused on healthcare cybersecurity, threat intelligence and operational resilience
- Designed for CISOs, IT security leaders, risk managers and compliance officers in healthcare organisations
- Discussion topics include medical device security, identity access management and zero trust frameworks
- Format combines technical sessions, executive roundtables, workshops and structured networking
- Organised by Health-ISAC, taking place October 12–16, 2026 in Crete, Greece
Introduction
The Health-ISAC 2026 European Summit brings together healthcare cybersecurity professionals for a concentrated programme addressing the sector’s most pressing security challenges. Scheduled for October 12–16, 2026 in Crete, Greece, the event serves as a platform for information sharing, threat intelligence exchange and collaborative problem-solving among organisations responsible for protecting healthcare infrastructure and patient data.
Healthcare remains one of the most targeted sectors for cyberattacks, with threat actors exploiting the critical nature of medical services and the complexity of healthcare IT environments. This summit responds to that reality by facilitating direct engagement between security practitioners, enabling the kind of peer-to-peer knowledge transfer that strengthens collective defence capabilities across the sector.
About This Event
Health-ISAC, the Health Information Sharing and Analysis Center, organises this annual European gathering as part of its mission to improve cybersecurity resilience across the global healthcare sector. The organisation operates as a trusted community where member organisations share threat intelligence, vulnerabilities and defensive strategies in a protected environment.
The summit spans five days and combines multiple formats to accommodate different learning preferences and professional objectives. Technical sessions address specific security challenges, while executive roundtables provide forums for strategic discussion among senior leaders. Workshops offer hands-on engagement with particular tools or methodologies, and structured networking opportunities allow attendees to build relationships that extend beyond the event itself.
Core Discussion Areas
The programme centres on several interconnected themes that reflect current priorities in healthcare security. Threat intelligence forms a foundational element, with sessions examining how organisations can better collect, analyse and operationalise information about emerging threats specific to healthcare environments.
Medical device security represents a particularly complex challenge for healthcare organisations. Connected medical devices often run legacy software, have limited patching capabilities and must remain operational to support patient care. The summit addresses strategies for managing these constraints while maintaining acceptable security postures.
Identity access management receives significant attention given the healthcare sector’s need to balance security controls with clinical workflow requirements. Clinicians require rapid access to patient information across multiple systems, creating tension with traditional access control models. Discussions explore how organisations are implementing more sophisticated identity frameworks without impeding care delivery.
The programme also examines zero trust architectures and their application within healthcare environments. Zero trust principles—which assume no implicit trust based on network location—require careful adaptation for healthcare settings where legacy systems, medical devices and clinical workflows create implementation challenges that differ substantially from other industries.
The Value of Sector-Specific Intelligence Sharing
Healthcare organisations face threat actors who understand the sector’s unique vulnerabilities and operational constraints. Ransomware operators, for instance, recognise that hospitals cannot simply shut down systems during an attack without risking patient safety. This dynamic makes healthcare-specific threat intelligence particularly valuable.
Information Sharing and Analysis Centers like Health-ISAC exist precisely to address this need. By creating trusted communities where competitors can collaborate on security matters, these organisations enable faster threat detection and more effective defensive responses across the sector. The European Summit extends this collaborative model into an intensive, face-to-face format that accelerates relationship building and knowledge exchange.
Who Should Attend
The summit serves professionals with responsibility for cybersecurity strategy and operations within healthcare organisations. Chief Information Security Officers and IT security directors will find strategic content addressing programme development and resource allocation. Risk managers and compliance officers can engage with sessions examining regulatory requirements and risk assessment methodologies. Technical practitioners benefit from detailed discussions of specific security controls and implementation approaches.
Attendees typically represent hospitals, health systems, medical device manufacturers and healthcare technology companies. The programme accommodates both technical depth and executive-level strategic discussion, making it relevant across organisational hierarchies.
Building Resilience Through Community
Beyond specific technical content, the summit emphasises the importance of professional networks in maintaining effective security programmes. Healthcare security leaders often operate with limited resources and face challenges that peers in other organisations have already addressed. The relationships formed at events like this create ongoing channels for consultation and support that extend well beyond the formal programme.
For organisations seeking to strengthen their cybersecurity capabilities while contributing to broader sector resilience, the Health-ISAC 2026 European Summit offers a concentrated opportunity for learning, collaboration and professional development.