Hospital Resilience and Preparedness for Armed Conflict in Europe

For two generations, European hospitals have been designed against a single failure mode: the surge. A bus crash, a flu season, a terrorist incident, a pandemic. Bad events that arrive, peak, and recede inside a system that otherwise continues to function. The assumption sitting underneath every emergency plan, every supply contract, and every continuity exercise was that the surrounding country would still be there to support the hospital while it absorbed the shock. That assumption no longer holds. The WHO has verified more than 2,000 attacks on health facilities in Ukraine since February 2022. The Niinistö Report and the EU Preparedness Union Strategy have moved kinetic threat from a national-security concern into a civilian-infrastructure design brief. European hospitals are now being asked to plan for a failure mode they were never built for: an environment in which the hospital itself is a target, the supply chain is contested, the workforce is mobilised or displaced, and the surrounding state cannot be relied on to fill the gaps. ## What changes when the threat is kinetic A hospital under kinetic threat is not a hospital running a busier day. It is a different operating environment. Power is intermittent or absent. Communications are degraded or compromised. Roads and rail are restricted or destroyed. Specialist staff are conscripted, evacuated, or unreachable. Pharmaceutical and medical-device supply chains run through countries that may themselves be affected. Decisions that were normally taken hours or days in advance now have to be taken in minutes, under information conditions the existing governance was not built for. Resilience in this environment is not a contingency function. It is a property of the building, the supply chain, the workforce structure, the digital stack, the governance model, and the surrounding network of facilities. Each of those layers fails differently under kinetic stress, and the failure of any one of them cascades into the others. Preparing for that is a design problem, not a procurement problem, and it cannot be solved by buying more of what already exists. ## Ten domains that have to hold together The work splits cleanly into ten interdependent domains. Physical infrastructure and built environment, including hardened and underground capacity, structural redundancy, and surge zoning learned from Cold War medical planning and from contemporary NATO doctrine such as the Rhine Ordnance Barracks programme. Supply chain resilience, including critical-dependency mapping, strategic stockpiling, and substitution pathways for pharmaceuticals, consumables, and devices whose primary sources sit outside European jurisdiction. Workforce resilience, including reservist clinical roles, dual-use training, family-protection arrangements that allow staff to keep working, and the legal architecture that decides who is mobilised and who stays clinical. Care-network design, including patient-flow plans across regional and cross-border networks, mutual-aid agreements, and the rules that decide which facility holds which capability. Transport and evacuation, including the protected corridors, the air-bridge capacity, and the inter-hospital coordination needed to move patients out of a degraded environment without losing the thread of care. Governance and command, including the chain of decision authority between civilian leadership, military medical command, and EU-level coordination when local governance is degraded. Digital infrastructure hardening, including segmentation, offline-capable clinical systems, identity and access under contested conditions, and the continuity of medical records when primary data centres are unavailable. Water, sanitation, energy, and waste continuity. Retrofitting versus new-build economics, because most of the European hospital estate will not be replaced in the relevant time frame. And stress-testing, because none of the above is real until it has been exercised against a credible scenario and the gaps have been priced. These domains are not a checklist. They are a system. A hospital that is structurally hardened but cannot keep its workforce in post fails. A workforce that is protected but cannot get supplies fails. A supply chain that holds but a digital stack that does not, fails. The work is to design the layers together. ## A tiered roadmap, with measurable outcomes Preparedness on this scale is not a project. It is a programme that has to deliver against tiered horizons. In the zero-to-two year horizon, the work is diagnostic and protective: mapping critical dependencies, establishing minimum stockpiles, hardening digital perimeters, exercising governance, and closing the most exposed single points of failure. In the three-to-five year horizon, the work is structural: retrofitting key sites, building network redundancy across regions and borders, embedding reservist and dual-use roles into the workforce model, and integrating civilian planning with NATO and EU medical command. In the five-plus year horizon, the work is generational: new-build standards that assume kinetic threat, supply chains rebuilt with European sovereignty in mind, and a healthcare workforce trained from the start to operate in degraded environments. Each horizon needs KPIs that an executive can be held to. Days of stockpile by critical category. Percentage of clinical workload supportable offline. Time to relocate a defined patient cohort. Percentage of staff with completed dual-use certification. Number of credible scenarios exercised against agreed standards. Without measurable outcomes, preparedness drifts back into narrative, and narrative is what failed in Ukraine. ## The standard European healthcare is being asked to absorb a class of risk it was not designed for, on a timeline that will not wait for the next strategic review. The decision in front of senior leadership is not whether to prepare. It is whether preparation will be designed as an integrated programme across infrastructure, supply, workforce, network, governance, and digital, or assembled in pieces after the first event has already exposed which layers do not hold. Acuvera works with health system leaders, ministries, regulators, and multilateral partners on the design and execution of healthcare preparedness and resilience programmes. The work covers diagnostic mapping, governance and command architecture, network and workforce redesign, digital and supply-chain hardening, and the tiered roadmaps and KPIs required to make preparedness measurable at national and EU level.