Ongoing EU project

The ASCLEPIUS project

Cybersecurity for European healthcare, delivered by a consortium of Polish microenterprises.

ASCLEPIUS is a project in which a consortium of Polish microorganisations, coordinated by IS Consulting, raises the level of cybersecurity at European healthcare facilities. The project is funded by the Digital Europe Programme via the European Cybersecurity Competence Centre (ECCC), and we provide services to beneficiaries pro bono. We work in an advisory, vendor agnostic model: we do not tie beneficiaries to a specific supplier, and we focus on maturity, resilience and real world feasibility. The project runs until the end of October 2026, and the results presented below reflect progress to date.

ASCLEPIUS, Cybersecurity for Healthcare

The project at a glance

Project value
€3.2 million
Duration
3 years (until October 2026)
Delivery
consortium of Polish microenterprises, coordinated by IS Consulting
Funding
Digital Europe Programme, overseen by the ECCC
Beneficiaries
six healthcare entities (public and private hospitals and one entity from the pharmaceutical supply chain)
Model
services delivered pro bono

What we delivered

We carry out our work across three complementary areas.

  • People and awareness

    We trained over 1,000 sector employees and ran more than 12 phishing campaigns. The effective click-through rate on links fell from 11% to 3%, a measurable demonstration of the effectiveness of recurring training and simulations. More than 40 people completed a bootcamp preparing them for the SSCP certification.

  • Testing and security assurance

    We carried out more than 37 static code analyses, over 14 infrastructure vulnerability scans and tests of more than 8 web applications. We translated the results into concrete remediation recommendations, reducing the attack surface before deployment to production.

  • Governance and resilience

    We carried out more than 7 organisational maturity assessments and evaluated over 15 critical suppliers. Around 20 hours of tabletop exercises let us rehearse various incident scenarios with beneficiaries. We developed new cybersecurity procedures, standards and policies, which remained with beneficiaries as ready-made templates for repeated use.

Effect

Beneficiaries gained a smaller attack surface, genuinely stronger team competencies, rehearsed response scenarios and lasting resources in the form of policies and procedures. We treated cybersecurity as support for medical staff, not as a barrier to their daily work.

Consortium

The project is delivered by a consortium of four Polish microenterprises.

  • IS Consulting

    coordinator

  • AMC Data

  • Secure IT

  • MB Services

Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Cybersecurity Competence Centre. Neither the European Union nor the granting authority can be held responsible for them.

Grant Agreement number: 101127583

The beneficiary and coordinator of ASCLEPIUS is IS Consulting Michał Zdunowski, NIP 5272408723, the sole proprietorship of the founder of IS Consulting sp. z o.o. Grant Agreement 101127583 is held by that entity.

Co-funded by the European UnionEuropean Cybersecurity Competence Centre (ECCC)