Cybersecurity Maturity Review of the Andhra Pradesh Health Sector

Overview & Synopsis

This report presents the findings of a World Bank cybersecurity maturity assessment of Andhra Pradesh’s public health sector, conducted at the request of the Department of Health and Family Welfare (DoHFW). The assessment found that while Andhra Pradesh has established a strong state-level cybersecurity framework, including policies, institutions, and operational infrastructure, the health sector remains at a formative stage of cybersecurity maturity. Key challenges include limited governance and oversight, inadequate financial and human resources, weak implementation of cybersecurity controls, insufficient risk management, low awareness among health sector staff, and limited coordination in incident response. The report recommends a phased five-year approach centered on strengthening cybersecurity governance, recruiting dedicated cybersecurity specialists, improving workforce capacity, conducting compliance audits and risk assessments, implementing security controls, and enhancing stakeholder collaboration. These measures aim to improve the health sector’s cyber resilience, protect sensitive health data, and strengthen the continuity and security of healthcare services across Andhra Pradesh.