Schlechte Karten - IT-Sicherheit im Jahr null der ePA für alle

Lecture with Bianca Kastl in the Chaos Computer Club Stuttgart series

The electronic patient file has been available to everyone since mid-2025 - after a few minor or major security problems in the run-up, whether a year ago at 38C3 or at the end of April for the nationwide launch. Time to draw a conclusion: Is the ePA now secure? Have sustainable changes been made that lead to greater security? Can dealing with the IT security of "one of Germany's largest IT projects" be helpful for future digital projects? It's time to take a step back and look at what was, what is and what is on the horizon, not only for the EPR, but also for the handling of IT security in similar projects in Germany. A comprehensive analysis of the history and causes of one of the most far-reaching misguided developments in the field of IT security in recent years, which is evident in far more than just poor testing of the presence of health cards in the healthcare system.

www.cccs.de
In cooperation with the Chaos Computer Club Stuttgart