Securing Picture Archiving and Communication System (PACS) Cybersecurity for the Healthcare Sector

Published

December 21, 2020

Author(s)

Jennifer L. Cawthra, Sue S. Wang, Bronwyn J. Hodges, Kangmin Zheng, Ryan T. Williams, Jason J. Kuruvilla, Christopher L. Peloquin, Kevin Littlefield, Bob Neimeyer

Abstract

Medical imaging plays an important role in diagnosing and treating patients. The system that manages medical images is known as the picture archiving communication system (PACS) and is nearly ubiquitous in healthcare environments. PACS is defined by the Food and Drug Administration (FDA) as a Class II device that “provides one or more capabilities relating to the acceptance, transfer, display, storage, and digital processing of medical images.” PACS centralizes functions surrounding medical imaging workflows and serves as an authoritative repository of medical image information.

Citation

Special Publication (NIST SP) - 1800-24

Report Number

1800-24

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

DOI Link

Keywords

access control, auditing, authentication, authorization, behavioral analytics, cloud storage, DICOM, EHR, electronic health records, encryption, microsegmentation, multifactor authentication, PACS, PAM, picture archiving and communication system, privileged account management, vendor neutral archive, VNA

Citation

Cawthra, J. , Wang, S. , Hodges, B. , Zheng, K. , Williams, R. , Kuruvilla, J. , Peloquin, C. , Littlefield, K. and Neimeyer, B. (2020), Securing Picture Archiving and Communication System (PACS) Cybersecurity for the Healthcare Sector, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.1800-24 (Accessed October 10, 2025)