DESIGN AND IMPLEMENTATION OF INCIDENCE REPORTING AND TRAINING PLATFORM FOR HEALTCARE SECTOR

ABSTRACT The healthcare sector increasingly faces intertwined physical and cybersecurity threats, yet current system operates separately, creating dangerous gap. This project introduces SecureIRP, an integrated incident response platform that unifies reporting and management of physical, cyber, and workplace safety incident in healthcare facilities. Overall, secureIRP has the potential to improve reporting compliance, speed up response times, strengthen staff security awareness, and foster a proactive security culture ultimately enhancing patient safety and healthcare operators. The system provides a comprehensive solution compromising three core modules, an intuitive incident reporting system that enables healthcare workers to seamlessly report cyber safety incidents through a unified interface. A dynamic training management platform that facilitates the administration of mandatory security awareness training and assessment and a collaborative suggestion framework that fosters continuous improvement through staff feedback and engagement. Developed using modern web technologies including Reacts.js, Node. Js, and MongoDB, the platform features role-based dashboard tailored for both healthcare staff and IRP administrators. The key innovations include the integration of NIST cybersecurity framework principles with healthcare safety protocols, implementation of a Just Culture approach to encourage and established of closed loop feedback mechanism that transform reported incident into organization learning opportunities, reduce response times, improved staff cybersecurity awareness, and create a proactive security option.