{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T23:53:04Z","timestamp":1781567584886,"version":"3.54.5"},"reference-count":64,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T00:00:00Z","timestamp":1781568000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T00:00:00Z","timestamp":1781568000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100006643","name":"Federation University Australia","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100006643","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cybersecurity"],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Healthcare is a crucial and multifaceted sector dedicated to maintaining and restoring human health through a comprehensive range of services, including preventive care, specialised treatments, and public health interventions. The integration of advanced digital technologies has transformed this sector, enhancing accessibility, efficiency, and service quality through the digitisation and centralisation of patient records. However, this transformation also introduces significant cybersecurity challenges, including risks of data breaches, unauthorised access, and cyberattacks. To address these challenges, this paper proposes a robust decision-making framework based on Multi-Criteria Decision-Making (MCDM) methodologies, specifically, the CRiteria Importance Through Intercriteria Correlation (CRITIC) and Technique for Order Preference by Similarity to Ideal Solution (TOPSIS) methods. These are extended into an ordinal fuzzy environment to develop Ordinal-CRITIC (O-CRITIC) and Ordinal-TOPSIS (O-TOPSIS), enabling effective evaluation of healthcare system alternatives under linguistic and qualitative criteria. Seven evaluation criteria are considered: Required Expertise (C1), Tool Availability (C2), Maturity Level (C3), Learnability (C4), Scope Width (C5), Completeness (C6), and Level of Detail (C7). The proposed methods were applied to rank 22 healthcare technologies. The results indicate that alternative A6 consistently achieved the highest rank across O-TOPSIS, SAW, and classic TOPSIS (C-TOPSIS) even after the comparative analysis, validating the robustness and reliability of the proposed framework. Conversely, alternatives such as A16 and A13 ranked lowest, highlighting their limitations against the established criteria. This was followed by sensitivity analysis further demonstrating the framework\u2019s stability under varying scenarios either for the ranking settings or following for different weighting. These findings underscore the importance of structured, objective decision-making in selecting secure and efficient healthcare systems, promoting proactive threat mitigation and resilient digital healthcare infrastructures.<\/jats:p>","DOI":"10.1186\/s42400-026-00614-2","type":"journal-article","created":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T23:02:28Z","timestamp":1781564548000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Enhancing cybersecurity in healthcare systems through a novel ordinal fuzzy decision analysis framework"],"prefix":"10.1186","volume":"9","author":[{"given":"Abdullah","family":"Alamoodi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dianese","family":"David","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Salem","family":"Garfan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7844-3990","authenticated-orcid":false,"given":"Osamah","family":"Albahri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ahmed","family":"Albahri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Iman Mohamad","family":"Sharaf","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,16]]},"reference":[{"key":"614_CR1","doi-asserted-by":"crossref","unstructured":"AbdulRaheem M, Awotunde JB, Chakraborty C, Adeniyi EA, Oladipo ID, Bhoi AK (2013) Security and privacy concerns in smart healthcare system. In: Implementation of smart healthcare systems using AI, IoT, and blockchain. Elsevier, pp. 243\u2013273","DOI":"10.1016\/B978-0-323-91916-6.00002-3"},{"issue":"6","key":"614_CR2","doi-asserted-by":"publisher","first-page":"714","DOI":"10.1007\/s42979-023-02221-1","volume":"4","author":"M Aijaz","year":"2023","unstructured":"Aijaz M, Nazir M, Mohammad MNA (2023a) Threat modeling and assessment methods in the healthcare-IT system: a critical review and systematic evaluation. SN Comput Sci 4(6):714","journal-title":"SN Comput Sci"},{"key":"614_CR3","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-023-02221-1","author":"M Aijaz","year":"2023","unstructured":"Aijaz M, Nazir M, Nadeem Anwar M (2023) Threat modeling and assessment methods in the healthcare-IT system: a critical review and systematic evaluation. SN Comput Sci. https:\/\/doi.org\/10.1007\/s42979-023-02221-1","journal-title":"SN Comput Sci"},{"key":"614_CR4","doi-asserted-by":"publisher","first-page":"101879","DOI":"10.1109\/ACCESS.2019.2930962","volume":"7","author":"A Algarni","year":"2019","unstructured":"Algarni A (2019) A survey and classification of security and privacy research in smart healthcare systems. IEEE Access 7:101879\u2013101894","journal-title":"IEEE Access"},{"key":"614_CR5","doi-asserted-by":"crossref","unstructured":"Almohri H, Cheng L, Yao D, Alemzadeh H (2017) On threat modeling and mitigation of medical cyber-physical systems. In: 2017 IEEE\/ACM international conference on connected health: applications, systems and engineering technologies (CHASE). IEEE, pp. 114\u2013119","DOI":"10.1109\/CHASE.2017.69"},{"issue":"2","key":"614_CR6","first-page":"246","volume":"9","author":"MSZ Alruwaili","year":"2024","unstructured":"Alruwaili MSZ et al (2024) The role of nursing in improving the quality of life for patients with mental illnesses. Gland Surg 9(2):246\u2013252","journal-title":"Gland Surg"},{"key":"614_CR7","unstructured":"Alsudairy NM et al. (2024) The importance of preventive medicine in family practice: a review of current guidelines and recommendations. J Adv Zool 45(1)"},{"key":"614_CR8","doi-asserted-by":"publisher","DOI":"10.35516\/jmj.v58i2.2527","author":"I Bala","year":"2024","unstructured":"Bala I, Pindoo I, Mijwil MM, Abotaleb M, Yundong W (2024) Ensuring security and privacy in healthcare systems: a review exploring challenges, solutions, future trends, and the practical applications of Artificial Intelligence. Jordan Med J. https:\/\/doi.org\/10.35516\/jmj.v58i2.2527","journal-title":"Jordan Med J"},{"issue":"2","key":"614_CR9","doi-asserted-by":"publisher","first-page":"218","DOI":"10.1111\/inr.12585","volume":"67","author":"W Bani Issa","year":"2020","unstructured":"Bani Issa W et al (2020) Privacy, confidentiality, security and patient safety concerns about electronic health records. Int Nurs Rev 67(2):218\u2013230","journal-title":"Int Nurs Rev"},{"key":"614_CR10","doi-asserted-by":"publisher","first-page":"503","DOI":"10.1016\/B978-0-443-21948-1.00024-8","volume":"15","author":"AS Bhanye","year":"2024","unstructured":"Bhanye AS, Bhanye JI (2024) Urban health in the 21st century: exploring innovative measures to reduce the spread of communicable diseases. Develop Environ Sci 15:503\u2013527","journal-title":"Develop Environ Sci"},{"issue":"13","key":"614_CR11","doi-asserted-by":"publisher","first-page":"10474","DOI":"10.1109\/JIOT.2021.3062630","volume":"8","author":"MN Bhuiyan","year":"2021","unstructured":"Bhuiyan MN, Rahman MM, Billah MM, Saha D (2021) Internet of things (IoT): a review of its enabling technologies in healthcare applications, standards protocols, security, and market opportunities. IEEE Internet Things J 8(13):10474\u201310498","journal-title":"IEEE Internet Things J"},{"key":"614_CR12","unstructured":"Cacace M (2007) \"The changing public\/private mix in the American Health Care System. TranState Working Papers"},{"key":"614_CR13","unstructured":"Calder R, Dunkin R, Rochford C, Nichols T (2019) Australian health services: too complex to navigate: a review of the national reviews of Australia's health service arrangements"},{"key":"614_CR14","doi-asserted-by":"publisher","first-page":"627","DOI":"10.1016\/j.procs.2017.08.314","volume":"113","author":"S Darwish","year":"2017","unstructured":"Darwish S, Nouretdinov I, Wolthusen SDJPcs (2017) Towards composable threat assessment for medical IoT (MIoT). Proced Comput Sci 113:627\u2013632","journal-title":"Proced Comput Sci"},{"key":"614_CR15","doi-asserted-by":"publisher","first-page":"959","DOI":"10.1007\/s10796-017-9809-4","volume":"21","author":"S Das","year":"2019","unstructured":"Das S, Mukhopadhyay A, Saha D, Sadhukhan S (2019) A markov-based model for information security risk assessment in healthcare MANETs. Inform Syst Front 21:959\u2013977","journal-title":"Inform Syst Front"},{"issue":"2","key":"614_CR16","first-page":"38","volume":"4","author":"E DeGenova","year":"2020","unstructured":"DeGenova E (2020) Healthcare: public or private. DU Quark 4(2):38\u201349","journal-title":"DU Quark"},{"issue":"96","key":"614_CR17","doi-asserted-by":"publisher","first-page":"37981","DOI":"10.1016\/j.ijhydene.2022.09.093","volume":"48","author":"H Dhumras","year":"2023","unstructured":"Dhumras H, Bajaj RK (2023) On prioritization of hydrogen fuel cell technology utilizing bi-parametric picture fuzzy information measures in VIKOR & TOPSIS decision-making approaches. Int J Hydrog Energy 48(96):37981\u201337998","journal-title":"Int J Hydrog Energy"},{"issue":"5","key":"614_CR18","first-page":"2819","volume":"15","author":"H Dhumras","year":"2023","unstructured":"Dhumras H, Bajaj RK, Shukla V (2023a) On utilizing modified TOPSIS with R-norm q-rung picture fuzzy information measure green supplier selection. Int J Inf Technol 15(5):2819\u20132825","journal-title":"Int J Inf Technol"},{"issue":"1","key":"614_CR19","doi-asserted-by":"publisher","first-page":"2557","DOI":"10.1109\/TCE.2023.3325434","volume":"70","author":"H Dhumras","year":"2023","unstructured":"Dhumras H, Shukla PK, Bajaj RK, Jain DK, Shukla V, Shukla PK (2023b) On federated learning-oriented q-Rung picture fuzzy TOPSIS\/VIKOR decision-making approach in electronic marketing strategic plans. IEEE Trans Consum Electron 70(1):2557\u20132565","journal-title":"IEEE Trans Consum Electron"},{"key":"614_CR20","doi-asserted-by":"crossref","unstructured":"Dhumras H, Bajaj RK, Shukla V (2022) On picture fuzzy information-based hybrid cryptographic TOPSIS approach for best suitable cloud storage and security level. In: International conference on cryptology & network security with machine learning. Springer, pp. 125\u2013134","DOI":"10.1007\/978-981-99-2229-1_12"},{"issue":"7","key":"614_CR21","doi-asserted-by":"publisher","first-page":"763","DOI":"10.1016\/0305-0548(94)00059-H","volume":"22","author":"D Diakoulaki","year":"1995","unstructured":"Diakoulaki D, Mavrotas G, Papayannakis L (1995) Determining objective weights in multiple criteria problems: the critic method. Comput Oper Res 22(7):763\u2013770","journal-title":"Comput Oper Res"},{"issue":"2","key":"614_CR22","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1016\/j.genhosppsych.2005.10.006","volume":"28","author":"BG Druss","year":"2006","unstructured":"Druss BG, von Esenwein SA (2006) Improving general medical care for persons with mental and addictive disorders: systematic review. Gen Hosp Psychiatry 28(2):145\u2013153","journal-title":"Gen Hosp Psychiatry"},{"key":"614_CR23","doi-asserted-by":"publisher","first-page":"102690","DOI":"10.1016\/j.omega.2022.102690","volume":"112","author":"F Ecer","year":"2022","unstructured":"Ecer F, Pamucar D (2022) A novel LOPCOW-DOBI multi-criteria sustainability performance assessment methodology: an application in developing country banking sector. Omega 112:102690","journal-title":"Omega"},{"issue":"16","key":"614_CR24","doi-asserted-by":"publisher","first-page":"5493","DOI":"10.3390\/s21165493","volume":"21","author":"G Gonzalez-Granadillo","year":"2021","unstructured":"Gonzalez-Granadillo G et al (2021) Automated cyber and privacy risk management toolkit. Sensors (Basel) 21(16):5493","journal-title":"Sensors (Basel)"},{"key":"614_CR25","doi-asserted-by":"publisher","first-page":"643","DOI":"10.1016\/j.asoc.2018.10.050","volume":"74","author":"MA Hatefi","year":"2019","unstructured":"Hatefi MA (2019) Indifference threshold-based attribute ratio analysis: a method for assigning the weights to the attributes in multiple attribute decision making. Appl Soft Comput 74:643\u2013651","journal-title":"Appl Soft Comput"},{"key":"614_CR26","doi-asserted-by":"publisher","unstructured":"Hayakawa T, Sasaki R, Hayashi H, Takahashi Y, Kaneko T, Okubo T (2018) Proposal and application of security\/safety evaluation method for medical device system that includes IoT. In: Presented at the Proceedings of the 2018 VII International Conference on Network, Communication and Computing, Taipei City, Taiwan. https:\/\/doi.org\/10.1145\/3301326.3301330","DOI":"10.1145\/3301326.3301330"},{"issue":"1","key":"614_CR27","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1186\/1472-6947-13-85","volume":"13","author":"E Henriksen","year":"2013","unstructured":"Henriksen E, Burkow TM, Johnsen E, Vognild LK (2013) Privacy and information security risks in a technology platform for home-based chronic disease rehabilitation and education. BMC Med Inform Decis Mak 13(1):85. https:\/\/doi.org\/10.1186\/1472-6947-13-85","journal-title":"BMC Med Inform Decis Mak"},{"key":"614_CR28","doi-asserted-by":"crossref","unstructured":"Hodges BJ, McDonald JT, Glisson WB, Jacobs M, van Devender M, Pardue JH (2020) Attack modeling and mitigation strategies for risk-based analysis of networked medical devices. In: 53rd Annual Hawaii International Conference on System Sciences, HICSS 2020. IEEE Computer Society, pp 6506\u20136515","DOI":"10.24251\/HICSS.2020.796"},{"key":"614_CR29","doi-asserted-by":"crossref","unstructured":"Hwang CL, Yoon K (1981) Methods for multiple attribute decision making. In: Multiple attribute decision making: methods and applications a state-of-the-art survey, pp. 58\u2013191","DOI":"10.1007\/978-3-642-48318-9_3"},{"issue":"2","key":"614_CR30","doi-asserted-by":"publisher","first-page":"14","DOI":"10.3390\/bios10020014","volume":"10","author":"M Ibrahim","year":"2020","unstructured":"Ibrahim M, Alsheikh A, Matar A (2020) Attack graph modeling for implantable pacemaker. Biosensors 10(2):14","journal-title":"Biosensors"},{"key":"614_CR31","doi-asserted-by":"crossref","unstructured":"Iwaya LH, Fischer-H\u00fcbner S, \u00c5hlfeldt R-M, Martucci LA (2018) mhealth: a privacy threat analysis for public health surveillance systems. In: 2018 IEEE 31st International Symposium on Computer-Based Medical Systems (CBMS). IEEE, pp. 42\u201347","DOI":"10.1109\/CBMS.2018.00015"},{"issue":"15","key":"614_CR32","doi-asserted-by":"publisher","first-page":"6699","DOI":"10.3390\/app11156699","volume":"11","author":"M Jofre","year":"2021","unstructured":"Jofre M et al (2021) Cybersecurity and privacy risk assessment of point-of-care systems in healthcare\u2014a use case approach. Appl Sci 11(15):6699","journal-title":"Appl Sci"},{"key":"614_CR33","doi-asserted-by":"publisher","DOI":"10.7860\/JCDR\/2022\/55387.16742","author":"SA Kaabi","year":"2022","unstructured":"Kaabi SA, Varughese B, Singh R (2022) Public and private healthcare system in terms of both quality and cost: a review. J Clin Diagnost Res. https:\/\/doi.org\/10.7860\/JCDR\/2022\/55387.16742","journal-title":"J Clin Diagnost Res"},{"key":"614_CR34","doi-asserted-by":"publisher","first-page":"115370","DOI":"10.1109\/ACCESS.2020.3003032","volume":"8","author":"D-W Kim","year":"2020","unstructured":"Kim D-W, Choi J-Y, Han K-H (2020) Medical device safety management using cybersecurity risk analysis. IEEE Access 8:115370\u2013115382","journal-title":"IEEE Access"},{"key":"614_CR35","doi-asserted-by":"publisher","DOI":"10.3390\/sym13060973","author":"A Krishnan","year":"2021","unstructured":"Krishnan A, Mat Kasim M, Hamid R, Ghazali MF (2021) A modified CRITIC method to estimate the objective weights of decision criteria. Symmetry. https:\/\/doi.org\/10.3390\/sym13060973","journal-title":"Symmetry"},{"key":"614_CR36","doi-asserted-by":"publisher","DOI":"10.54517\/ssd.v1i1.2220","author":"M Madanchian","year":"2023","unstructured":"Madanchian M, Taherdoost H (2023) A comprehensive guide to the TOPSIS method for multi-criteria decision making. Sustain Soc Dev. https:\/\/doi.org\/10.54517\/ssd.v1i1.2220","journal-title":"Sustain Soc Dev"},{"key":"614_CR37","unstructured":"Mahler T, Elovici Y, Shahar Y (2020) A new methodology for information security risk assessment for medical devices and its evaluation. arXiv preprint arXiv:2002.06938."},{"key":"614_CR38","doi-asserted-by":"crossref","unstructured":"Manikas TW, Feinstein DY, Thornton MA (2012) Modeling medical system threats with conditional probabilities using multiple-valued logic decision diagrams. In: 2012 IEEE 42nd international symposium on multiple-valued logic. IEEE, pp 244\u2013249","DOI":"10.1109\/ISMVL.2012.29"},{"key":"614_CR39","unstructured":"Mi\u00e7 P and Antmen ZF (2019) A healthcare facility location selection problem with fuzzy TOPSIS method for a regional hospital. Avrupa Bilim ve Teknoloji Dergisi (16): 750\u2013757"},{"issue":"2","key":"614_CR40","doi-asserted-by":"publisher","first-page":"1135","DOI":"10.4236\/ojbm.2024.122060","volume":"12","author":"D Ng\u2019andu","year":"2024","unstructured":"Ng\u2019andu D, Haabazoka L (2024) A study of the effect of health records digitalization on healthcare facility operational efficiency. Open J Bus Manag 12(2):1135\u20131157","journal-title":"Open J Bus Manag"},{"key":"614_CR41","doi-asserted-by":"publisher","first-page":"621","DOI":"10.1007\/s10207-020-00522-7","volume":"20","author":"M Ngambo\u00e9","year":"2021","unstructured":"Ngambo\u00e9 M, Berthier P, Ammari N, Dyrda K, Fernandez JM (2021) Risk assessment of cyber-attacks on telemetry-enabled cardiac implantable electronic devices (CIED). Int J Inf Secur 20:621\u2013645","journal-title":"Int J Inf Secur"},{"issue":"4","key":"614_CR42","doi-asserted-by":"publisher","first-page":"548","DOI":"10.1111\/capa.12090","volume":"57","author":"FL Ohemeng","year":"2014","unstructured":"Ohemeng FL, Grant JK (2014) Neither public nor private: the efficacy of mixed model public service delivery in two C anadian municipalities. Can Public Adm 57(4):548\u2013572","journal-title":"Can Public Adm"},{"key":"614_CR43","doi-asserted-by":"crossref","unstructured":"Pandey V, Komal, Din\u00e7er H (2023) A review on TOPSIS method and its extensions for different applications with recent development. Soft Comput 27(23): 18011\u201318039","DOI":"10.1007\/s00500-023-09011-0"},{"issue":"7","key":"614_CR44","doi-asserted-by":"publisher","first-page":"2426","DOI":"10.3390\/s21072426","volume":"21","author":"T Poleto","year":"2021","unstructured":"Poleto T, Silva MM, Clemente TRN, de Gusm\u00e3o APH, Ara\u00fajo APDB, Costa AP (2021) A risk assessment framework proposal based on bow-tie analysis for medical image diagnosis sharing within telemedicine. Sensors 21(7):2426","journal-title":"Sensors"},{"key":"614_CR45","doi-asserted-by":"publisher","first-page":"102614","DOI":"10.1016\/j.ijdrr.2021.102614","volume":"66","author":"E Rafiei-Sardooi","year":"2021","unstructured":"Rafiei-Sardooi E, Azareh A, Choubin B, Mosavi AH, Clague JJ (2021) Evaluating urban flood risk using hybrid method of TOPSIS and machine learning. Int J Disaster Risk Reduct 66:102614. https:\/\/doi.org\/10.1016\/j.ijdrr.2021.102614","journal-title":"Int J Disaster Risk Reduct"},{"key":"614_CR46","doi-asserted-by":"crossref","unstructured":"Goswami SS, Tapankumar T, Naik NCK, Gowrishankar J, Bhosle N, Singh A, et al (2025) Multi-model MCDM framework for sustainable renewable energy selection in India: integrating CRITIC-EDAS-CODAS-CoCoSo. Disc Sustain 6(1):500","DOI":"10.1007\/s43621-025-01069-0"},{"issue":"2","key":"614_CR47","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1016\/0165-0114(95)00166-2","volume":"78","author":"RA Ribeiro","year":"1996","unstructured":"Ribeiro RA (1996) Fuzzy multiple attribute decision making: a review and new preference elicitation techniques. Fuzzy Sets Syst 78(2):155\u2013181","journal-title":"Fuzzy Sets Syst"},{"issue":"4","key":"614_CR48","first-page":"18","volume":"2","author":"NP Sharofitdinovna","year":"2024","unstructured":"Sharofitdinovna NP, Abduroziqovich KA, Dilovarovna BJ (2024) Emergency care organization. Web Med J Med Pract Nurs 2(4):18\u201320","journal-title":"Web Med J Med Pract Nurs"},{"key":"614_CR49","doi-asserted-by":"crossref","unstructured":"Singh A, Dhumras H, Bajaj RK (2022) On green supplier selection problem utilizing modified TOPSIS with R-norm picture fuzzy discriminant measure. In: 2022 5th international conference on multimedia, signal processing and communication technologies (IMPACT). IEEE, pp. 1\u20135","DOI":"10.1109\/IMPACT55510.2022.10029080"},{"key":"614_CR50","doi-asserted-by":"publisher","first-page":"106354","DOI":"10.1016\/j.asoc.2020.106354","volume":"93","author":"A Sotoudeh-Anvari","year":"2020","unstructured":"Sotoudeh-Anvari A (2020) A critical review on theoretical drawbacks and mathematical incorrect assumptions in fuzzy OR methods: Review from 2010 to 2020. Appl Soft Comput 93:106354","journal-title":"Appl Soft Comput"},{"key":"614_CR51","doi-asserted-by":"publisher","first-page":"102316","DOI":"10.1016\/j.cose.2021.102316","volume":"107","author":"I Stellios","year":"2021","unstructured":"Stellios I, Kotzanikolaou P, Grigoriadis C (2021) Assessing IoT enabled cyber-physical attack paths against critical systems. Comput Secur 107:102316. https:\/\/doi.org\/10.1016\/j.cose.2021.102316","journal-title":"Comput Secur"},{"key":"614_CR52","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1016\/j.ijcip.2017.04.001","volume":"19","author":"I Stine","year":"2017","unstructured":"Stine I, Rice M, Dunlap S, Pecarina J (2017) A cyber risk scoring system for medical devices. Int J Crit Infrastruct Prot 19:32\u201346. https:\/\/doi.org\/10.1016\/j.ijcip.2017.04.001","journal-title":"Int J Crit Infrastruct Prot"},{"key":"614_CR53","doi-asserted-by":"publisher","first-page":"183339","DOI":"10.1109\/ACCESS.2019.2960617","volume":"7","author":"Y Sun","year":"2019","unstructured":"Sun Y, Lo FP-W, Lo B (2019) Security and privacy for the internet of medical things enabled healthcare systems: a survey. IEEE Access 7:183339\u2013183355","journal-title":"IEEE Access"},{"key":"614_CR54","doi-asserted-by":"crossref","unstructured":"Tomashchuk O (2020) Threat and risk management framework for eHealth IoT applications. In Proceedings of the 24th ACM international systems and software product line conference-volume B pp 120\u2013126.","DOI":"10.1145\/3382026.3431250"},{"key":"614_CR55","doi-asserted-by":"crossref","unstructured":"Tumial\u00e1n LM (2019) Healthcare systems in the United States. In: Quality spine care: healthcare systems, quality reporting, and risk adjustment, pp. 155\u2013169","DOI":"10.1007\/978-3-319-97990-8_10"},{"issue":"7","key":"614_CR56","doi-asserted-by":"publisher","first-page":"e41535","DOI":"10.1097\/MD.0000000000041535","volume":"104","author":"CN Ugwu","year":"2025","unstructured":"Ugwu CN et al (2025) Sustainable development goals (SDGs) and resilient healthcare systems: addressing medicine and public health challenges in conflict zones. Medicine 104(7):e41535","journal-title":"Medicine"},{"issue":"15","key":"614_CR57","doi-asserted-by":"publisher","first-page":"13338","DOI":"10.1109\/JIOT.2022.3144130","volume":"9","author":"V Vakhter","year":"2022","unstructured":"Vakhter V, Soysal B, Schaumont P, Guler U (2022) Threat modeling and risk analysis for miniaturized wireless biomedical devices. IEEE Internet Things J 9(15):13338\u201313352","journal-title":"IEEE Internet Things J"},{"key":"614_CR58","doi-asserted-by":"publisher","DOI":"10.1007\/s13369-021-05602-x","author":"G Viswanathan","year":"2021","unstructured":"Viswanathan G, Jayagopal P (2021) A threat categorization of risk-based approach for analyzing security threats early phase in SDLC. Arab J Sci Eng. https:\/\/doi.org\/10.1007\/s13369-021-05602-x","journal-title":"Arab J Sci Eng"},{"issue":"2","key":"614_CR59","doi-asserted-by":"publisher","first-page":"325","DOI":"10.1177\/106591297302600209","volume":"26","author":"AR Wilcox","year":"1973","unstructured":"Wilcox AR (1973) Indices of qualitative variation and political measurement. West Polit Q 26(2):325\u2013343","journal-title":"West Polit Q"},{"issue":"3","key":"614_CR60","doi-asserted-by":"publisher","first-page":"375","DOI":"10.7326\/M23-2991","volume":"177","author":"JL Wiler","year":"2024","unstructured":"Wiler JL, Kosinski LR, Mills TL, Walton J (2024) Where are all the specialists? Current challenges of integrating specialty care into population-based total cost of care payment models. Ann Intern Med 177(3):375\u2013382","journal-title":"Ann Intern Med"},{"issue":"4","key":"614_CR61","doi-asserted-by":"publisher","first-page":"1348","DOI":"10.1080\/20479700.2020.1760015","volume":"14","author":"Z Wu","year":"2021","unstructured":"Wu Z, Trigo V (2021) Impact of information system integration on the healthcare management and medical services. Int J Healthcare Manag 14(4):1348\u20131356","journal-title":"Int J Healthcare Manag"},{"issue":"6","key":"614_CR62","doi-asserted-by":"publisher","first-page":"1752","DOI":"10.1109\/JBHI.2019.2952906","volume":"24","author":"T Yaqoob","year":"2019","unstructured":"Yaqoob T, Abbas H, Shafqat N (2019) Integrated security, safety, and privacy risk assessment framework for medical devices. IEEE J Biomed Health Inform 24(6):1752\u20131761","journal-title":"IEEE J Biomed Health Inform"},{"key":"614_CR63","doi-asserted-by":"publisher","first-page":"115354","DOI":"10.1016\/j.eswa.2021.115354","volume":"183","author":"M Yazdani","year":"2021","unstructured":"Yazdani M, Ebadi Torkayesh A, Stevi\u0107 \u017d, Chatterjee P, Asgharieh Ahari S, Doval Hernandez V (2021) An interval valued neutrosophic decision-making structure for sustainable supplier selection. Expert Syst Appl 183:115354. https:\/\/doi.org\/10.1016\/j.eswa.2021.115354","journal-title":"Expert Syst Appl"},{"issue":"02","key":"614_CR64","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1142\/S0219622016500036","volume":"15","author":"EK Zavadskas","year":"2016","unstructured":"Zavadskas EK, Podvezko V (2016) Integrated determination of objective criteria weights in MCDM. Int J Inf Technol Decis Mak 15(02):267\u2013283","journal-title":"Int J Inf Technol Decis Mak"}],"container-title":["Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-026-00614-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s42400-026-00614-2","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-026-00614-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T23:02:33Z","timestamp":1781564553000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1186\/s42400-026-00614-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,16]]},"references-count":64,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,12]]}},"alternative-id":["614"],"URL":"https:\/\/doi.org\/10.1186\/s42400-026-00614-2","relation":{},"ISSN":["2523-3246"],"issn-type":[{"value":"2523-3246","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,16]]},"assertion":[{"value":"5 December 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 June 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 June 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare that they have no competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interest"}}],"article-number":"178"}}