The Health Sector Coordinating Council's Cybersecurity Working Group published the Playbook for AI Clinical Resilience: Managing Cybersecurity and Patient Safety Risks on October 8. The 26 page framework comes from the Threat Operations subgroup of the Council's AI Cybersecurity Task Group, led by Navy Commander Janette Arencibia and Clearwater vice president David Bailey. It covers AI used across inpatient, acute care, and outpatient settings: triage, diagnostic assessment, patient monitoring, documentation, scheduling, and care coordination.
The playbook splits authority by who controls the failing component. A health system can monitor local model performance, suspend or limit a tool, and switch clinicians to manual workflows on its own. It cannot retrain or recalibrate a vendor controlled model without the manufacturer. The manufacturer of record must perform or expressly authorize any change to regulated or manufacturer controlled functionality, and a return to service needs two separate confirmations before it happens.
Those two confirmations are the manufacturer certifying that the version and configuration are supported, and the health system validating local workflows, interfaces, and patient safety controls. The playbook wants response triggers set before deployment, using measurable, model specific metrics such as sensitivity, specificity, calibration, false negative rate, subgroup performance, or clinician override rate. It treats drift as a model governance issue unless data poisoning is suspected, and for agentic AI that places orders or updates records, it recommends least privilege permissions, allow listed actions, human approval before patient impacting writes, execution logs, rate limits, and an emergency stop.
HSCC's own rule says it plainly: a high risk score alone does not authorize shutting a device down. Product security teams should paste that line directly into their own incident runbooks, because it draws the boundary HSCC wants hospitals to respect: contain what you control, document the risk assessment, and wait on the manufacturer for everything you do not.