Healthcare facilities must have business continuity plan, according to an article on Schneider Electric website. There are clear laws and guidelines in place to help healthcare facilities ensure the viability of critical systems.
Essential electrical system circuits are required to have an alternate power source, such as a UPS and generator.
U.S. hospitals are required to follow National Fire Protection Association (NFPA) codes that require emergency power supply systems be tested at least 12 times a year, every 20 to 40 days, for a minimum of 30 minutes, at specific loads.
Other assessments — such as vulnerability assessments — while perhaps not required, make good sense to prevent catastrophic losses in healthcare facilities.
Cyberattack Results in Patient Reroutes at Anne Arundel Medical Center
Tangram Furnishes Be Well OC Irvine Behavioral Health Campus
Suntree Internal Medicine Reports Data Breach
Why Healthcare Facilities Management Is Critical to Patient Safety 
Sanford Health and North Memorial Health Finalize Partnership