CYBERSECURITY IN MEDICAL EDUCATION: A RETROSPECTIVE ANALYSIS AND PEDAGOGICAL PRINCIPLES FOR DEVELOPING THE COMPETENCIES OF FUTURE MEDICAL PROFESSIONALS

Abstract

Abstract. This article presents the results of a retrospective analysis of the development of cybersecurity in medical education as a component of the digital transformation of the healthcare system. It traces the evolution of approaches to protecting medical data—from ensuring the physical confidentiality of paper archives to the functioning of modern digital ecosystems encompassing electronic health records, telemedicine platforms, cloud services, the Internet of Medical Things (IoMT), artificial intelligence systems, and integrated eHealth environments.

The study analyzes key international regulatory models and cybersecurity standards (HIPAA, NIST, GDPR, NIS, EHDS) that define the current paradigm of proactive digital risk management in the healthcare sector. It examines contemporary cyber threats, including ransomware attacks, social engineering, DDoS attacks, leaks of confidential information, and vulnerabilities in IoMT devices, which directly impact the quality of medical care and the functioning of healthcare facilities. The paper highlights the specifics of the Ukrainian context of eHealth system development amid a hybrid war and targeted cyberattacks on critical medical infrastructure.

Particular attention is paid to the educational dimension of the problem. It is demonstrated that the growing digitalization of medical practice underscores the need to integrate cybersecurity as an interdisciplinary component of the professional training of future healthcare professionals. It is argued that a modern healthcare professional must possess not only clinical knowledge but also competencies in the areas of cyber hygiene, secure operation of electronic medical systems, protection of patients’ personal data, recognition of digital threats, and adherence to the ethical and legal norms governing the practice of digital medicine.

The pedagogical foundations for developing cybersecurity competencies have been identified, including: competency-based, contextual, interdisciplinary, and risk-oriented approaches; the integration of clinical and digital thinking; and the use of case studies, simulation scenarios, and practice-oriented learning. The need to transition from fragmented information about cyber threats to the systematic development of behavioral models for safe professional practice in the digital environment is emphasized.

The historical and genesis-related barriers to the development of cybersecurity competence among future healthcare professionals are analyzed, including: the gap between the pace of digitalization in medical practice and the content of educational programs; the institutional marginalization of cybersecurity in medical education; the dominance of traditional clinical thinking over a risk-oriented digital approach; the asynchrony between the development of regulatory frameworks and educational reforms; insufficient integration of international cybersecurity standards into the professional training system; and the absence of a comprehensive pedagogical model for teaching cybersecurity to future medical professionals. The necessity of modernizing the content of medical education in accordance with the contemporary challenges of digital medicine and the cyber resilience of the healthcare system is substantiated.