{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,25]],"date-time":"2026-08-25T11:33:25Z","timestamp":1787657605892,"version":"build-2736575974"},"reference-count":40,"publisher":"Wiley","issue":"12","license":[{"start":{"date-parts":[[2025,11,23]],"date-time":"2025-11-23T00:00:00Z","timestamp":1763856000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["aapm.onlinelibrary.wiley.com"],"crossmark-restriction":true},"short-container-title":["J Applied Clin Med Phys"],"published-print":{"date-parts":[[2025,12]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>A growing number of clinics have experienced disruptions of clinical services due to cyberattacks. To provide continuity of care, medical physicists should work with Information Technology (IT) staff to develop a business continuity plan. Such planning requires the participation of many stakeholders and should include the development of policies and procedures that not only make the clinic more cyber\u2010resilient but also address patient safety and ethics concerns. This report discusses the business continuity planning considerations for radiology and radiation oncology.<\/jats:p>","DOI":"10.1002\/acm2.70358","type":"journal-article","created":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T07:39:48Z","timestamp":1763969988000},"update-policy":"https:\/\/doi.org\/10.1002\/crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["AAPM working group on cybersecurity report 438: A white paper on cybersecurity management for business continuity in radiology and radiation therapy"],"prefix":"10.1002","volume":"26","author":[{"given":"R. Alfredo","family":"Siochi","sequence":"first","affiliation":[{"name":"Department of Radiation Oncology West Virginia University Medicine  Morgantown West Virginia USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Balter","sequence":"additional","affiliation":[{"name":"Department of Radiation Oncology UT MD Anderson Cancer Center  Houston Texas USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2217-7272","authenticated-orcid":false,"given":"Samantha","family":"Hedrick","sequence":"additional","affiliation":[{"name":"Medical Physics Thompson Proton Center  Knoxville Tennessee USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-1724-3545","authenticated-orcid":false,"given":"Jonathan","family":"Howe","sequence":"additional","affiliation":[{"name":"Radiation Oncology Norton Cancer Institute  Louisville Kentucky USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianjun","family":"Ma","sequence":"additional","affiliation":[{"name":"Radiation Oncology Virginia Commonwealth University  Richmond Virginia USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emilie","family":"Soisson","sequence":"additional","affiliation":[{"name":"Radiation Oncology University of Vermont Medical Center  Burlington Vermont USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3752-5997","authenticated-orcid":false,"given":"Joshua","family":"Yung","sequence":"additional","affiliation":[{"name":"Imaging Physics UT MD Anderson Cancer Center  Houston Texas USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bruce","family":"Curran","sequence":"additional","affiliation":[{"name":"Radiation Oncology VCU Health System  Richmond Virginia USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"311","published-online":{"date-parts":[[2025,11,23]]},"reference":[{"key":"e_1_2_13_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10877-023-01013-5"},{"key":"e_1_2_13_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adro.2022.100897"},{"key":"e_1_2_13_4_1","doi-asserted-by":"publisher","DOI":"10.1002\/cncr.27652"},{"key":"e_1_2_13_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijrobp.2016.08.046"},{"key":"e_1_2_13_6_1","doi-asserted-by":"publisher","DOI":"10.1001\/jamaoncol.2020.0809"},{"key":"e_1_2_13_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijrobp.2007.03.010"},{"key":"e_1_2_13_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.prro.2023.05.001"},{"key":"e_1_2_13_9_1","doi-asserted-by":"publisher","DOI":"10.1118\/1.4947547"},{"key":"e_1_2_13_10_1","unstructured":"cybersecurity.NIST Computer Security Resource Center. Accessed April 14 2025 https:\/\/csrc.nist.gov\/glossary\/term\/cybersecurity"},{"key":"e_1_2_13_11_1","unstructured":"Federal Food Drug and Cosmetic Act 21 U.S.C. section 524 B. 2023. Accessed April 14 2025 https:\/\/uscodeweb1.house.gov\/view.xhtml?path=\/prelim@title21\/chapter9&edition=prelim"},{"key":"e_1_2_13_12_1","unstructured":"Cyber Threat.NIST Computer Security Resource Center. Accessed March 6 2023 https:\/\/csrc.nist.gov\/glossary\/term\/cyber_threat"},{"key":"e_1_2_13_13_1","doi-asserted-by":"publisher","DOI":"10.3233\/THC-151102"},{"key":"e_1_2_13_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2008.10.009"},{"key":"e_1_2_13_15_1","doi-asserted-by":"crossref","unstructured":"CaralliRA StevensJF YoungLR WilsonWR.Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process:Defense Technical Information Center;2007.","DOI":"10.21236\/ADA470450"},{"key":"e_1_2_13_16_1","unstructured":"QuinnS IvyN BarrettM FeldmanL WitteG GardnerRK.Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management:National Institute of Standards and Technology;2021."},{"key":"e_1_2_13_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adro.2020.11.001"},{"key":"e_1_2_13_18_1","doi-asserted-by":"publisher","DOI":"10.1002\/acm2.13422"},{"key":"e_1_2_13_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adro.2022.100914"},{"key":"e_1_2_13_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10278-021-00466-x"},{"key":"e_1_2_13_21_1","unstructured":"Tracy v. Elekta Inc.1:21\u2010cv\u201002851\u2010SDG(2021)."},{"key":"e_1_2_13_22_1","doi-asserted-by":"publisher","DOI":"10.1002\/mp.17502"},{"key":"e_1_2_13_23_1","unstructured":"National Institute of Standards and Technology.Cybersecurity Framework.NIST. Accessed May 15 2024 https:\/\/www.nist.gov\/cyberframework"},{"key":"e_1_2_13_24_1","unstructured":"Cybersecurity in Medical Devices:Quality System Considerations and Content of Premarket Submissions.U.S. Food & Drug Administration. September 26 2023. Accessed April 14 2025 https:\/\/www.fda.gov\/media\/119933\/download?attachment"},{"key":"e_1_2_13_25_1","unstructured":"ISAGCA Quick Start Guide:An Overview of ISA\/IEC 62443 Standards.Global Cybersecurity Alliance. June2020. Accessed April 14 2025 https:\/\/gca.isa.org\/hubfs\/ISAGCA%20Quick%20Start%20Guide%20FINAL.pdf"},{"key":"e_1_2_13_26_1","unstructured":"ISO\/IEC 27001:2022Information security cybersecurity and privacy protection \u2010 Information security management systems \u2010 Requirements.International Organization for Standardization. October2022. Accessed April 14 2025 https:\/\/www.iso.org\/standard\/27001"},{"key":"e_1_2_13_27_1","unstructured":"ISO\/IEC 27032:2023Cybersecurity \u2010 Guidelines for Internet Security.International Organization for Standardization. June2023. Accessed April 14 2025 https:\/\/www.iso.org\/standard\/76070.html"},{"key":"e_1_2_13_28_1","unstructured":"Department of Health and Human Services.Home.HHS 405(d). Accessed May 15 2024 https:\/\/405d.hhs.gov\/"},{"key":"e_1_2_13_29_1","volume-title":"Crisis Standards of Care: A Systems Framework for Catastrophic Disaster Response: Volume 1: Introduction and CSC Framework","author":"Institute of Medicine","year":"2012"},{"key":"e_1_2_13_30_1","doi-asserted-by":"publisher","DOI":"10.17226\/25784"},{"key":"e_1_2_13_31_1","doi-asserted-by":"publisher","DOI":"10.1017\/dmp.2020.101"},{"key":"e_1_2_13_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.annemergmed.2011.07.037"},{"key":"e_1_2_13_33_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.annemergmed.2012.03.026"},{"key":"e_1_2_13_34_1","doi-asserted-by":"publisher","DOI":"10.1378\/chest.14-0736"},{"key":"e_1_2_13_35_1","volume-title":"Crisis Standards of Care \u2010 Quick Guide for Health Care Providers","author":"Hanfling D","year":"2020"},{"key":"e_1_2_13_36_1","doi-asserted-by":"publisher","DOI":"10.1086\/JCE201021411"},{"key":"e_1_2_13_37_1","doi-asserted-by":"publisher","DOI":"10.1002\/acm2.12469"},{"key":"e_1_2_13_38_1","doi-asserted-by":"publisher","DOI":"10.1002\/mp.14868"},{"key":"e_1_2_13_39_1","volume-title":"Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions","author":"U.S. Food & Drug Administration","year":"2023"},{"key":"e_1_2_13_40_1","unstructured":"ANSI\/NEMA.HN 1\u20102019. 100382."},{"key":"e_1_2_13_41_1","volume-title":"Role Based Access Control","author":"NIST Information Technology Laboratory","year":"2020"}],"container-title":["Journal of Applied Clinical Medical Physics"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/aapm.onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/acm2.70358","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,31]],"date-time":"2025-12-31T11:12:39Z","timestamp":1767179559000},"score":1,"resource":{"primary":{"URL":"https:\/\/aapm.onlinelibrary.wiley.com\/doi\/10.1002\/acm2.70358"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,23]]},"references-count":40,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2025,12]]}},"alternative-id":["10.1002\/acm2.70358"],"URL":"https:\/\/doi.org\/10.1002\/acm2.70358","archive":["Portico"],"relation":{},"ISSN":["1526-9914","1526-9914"],"issn-type":[{"value":"1526-9914","type":"print"},{"value":"1526-9914","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,23]]},"assertion":[{"value":"2025-01-28","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-10-17","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-11-23","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"e70358"}}