nexus_hypersoc-hope.jpg
Healthcare
Cyber Resilience
Risk Management

ASL Roma 1: From HyperSOC to H.O.P.E.

Stefano Scaramuzzino
Fabio Battelli
/
Apr 17, 2025

Today more than ever, the healthcare sector finds itself under increasing scrutiny from cybercriminals. The daily handling of highly sensitive clinical data and the essential need to ensure continuity of care make healthcare facilities particularly attractive targets to threat actors. The risk is not only economic or reputational but also human: a cyberattack can compromise the functionality of life-saving equipment or access to crucial patient information.

In Italy, the number of cyberattacks targeting the healthcare sector has increased by 30% in the past year alone. In this critical scenario, healthcare organizations must meet the challenge with adequate tools, moving away from traditional defensive strategies and adopting a more advanced and resilient security model.

From Traditional Security to a Hyperconverged Model

ASL Roma 1 viewed this change as an opportunity and began a digital transformation process that places security at the core of its mission. This led to the creation of HyperSOC, an advanced hyperconverged Security Operation Center capable of continuous monitoring, real-time response, and predictive analysis.


Thanks to the use of artificial intelligence and machine learning technologies, HyperSOC can detect and neutralize potential threats before they manifest. The system gathers data from across the infrastructure—from security logs to medical devices—and integrates them into a data lake that feeds predictive analytics models. This approach enables ASL Roma 1 to maintain uninterrupted service, even during attack attempts or emergency situations.

The Birth of the H.O.P.E. Model

From HyperSOC comes a further evolution: the H.O.P.E. model, an acronym for Healthcare Operational Protection & Excellence. More than a technological extension, H.O.P.E. represents a holistic vision of digital healthcare, where security and operational quality are inseparable parts of a unified ecosystem.


The project arises from the awareness that cybersecurity alone is not enough. The true challenge is to integrate security into the organizational culture, enhancing efficiency, fostering innovation, and ensuring the resilience of clinical and administrative services.

The Pillars of H.O.P.E.

The H.O.P.E. model is built on four core principles that guide the strategies and implementations at ASL Roma 1:

1. Integrated Protection

Security is designed to encompass the entire infrastructure—from IT systems to clinical equipment, including mobile devices and networks. The adoption of the Zero Trust architecture ensures that every access is authorized, monitored, and limited according to strict criteria, thus minimizing the attack surface.

2. Operational Excellence

H.O.P.E. aims to optimize healthcare processes through automation and data analysis. This results in shorter response times, better resource management, and stronger support for healthcare professionals in their daily activities, without slowdowns or disruptions caused by security issues.

3. Resilience

Healthcare infrastructure must withstand and adapt to any critical event. H.O.P.E. ensures service continuity even in the face of cyberattacks, guaranteeing the protection of clinical data and the functionality of essential equipment.

4. Innovation

The model promotes the adoption of emerging technologies, such as artificial intelligence, for proactive threat detection and predictive analysis. The goal is not only to defend but also to anticipate and prevent attacks, building a flexible and intelligent digital healthcare system.

Tangible Benefits for ASL Roma 1

The implementation of the H.O.P.E. model is delivering significant results for ASL Roma 1. 

Notable benefits include:

  • A substantial reduction in cybersecurity incidents, thanks to greater visibility and response capacity.

  • A more resilient infrastructure capable of ensuring operational continuity even in critical scenarios.

  • Increased efficiency in operational workflows, with faster response times and more rational use of resources.

  • Improved quality of care, thanks to a secure, stable, and technologically advanced environment.

Conclusion: The Strategic Value of H.O.P.E.

H.O.P.E. is much more than a technological solution: it is a new paradigm that places cybersecurity at the service of healthcare quality. Through integrated protection, operational efficiency, resilience, and innovation, ASL Roma 1 has created a model capable of profoundly transforming healthcare delivery.

This integrated approach serves as a reference point for the entire national healthcare system, demonstrating how technology and collective well-being can work hand in hand.

With H.O.P.E., ASL Roma 1 is committed to ensuring a safe and resilient healthcare system, providing comprehensive operational protection and promoting excellence for the well-being of patients and staff.

Healthcare
Cyber Resilience
Risk Management
Stefano Scaramuzzino
Technical Manager, Cybersecurity ASL Roma 1

Stefano Scaramuzzino is the cybersecurity team leader and network and information systems manager, for ASL Roma 1, Italy's largest local health authority.

Fabio Battelli
Partner, Cyber Risk Services

A partner at Deloitte Italy Cyber Risk Services, Battelli has 25 years consulting experience with a specific focus on ICT/Cybersecurity where he is well-recognized trusted advisor and subject matter expert in critical infrastructure protection (CIP).

Stay in the know Get the Nexus Connect Newsletter
You might also like… Read more
Latest on Nexus Podcast