Fully digital hospitals depend on electronic medical records, connected clinical devices, picture archiving, laboratory systems, pharmacy platforms, identity services, cloud workloads and external exchange channels. This review develops a Saudi-focused maturity model for incident response and disaster recovery that treats cybersecurity as a clinical continuity discipline rather than as a purely technical function. The aim is to clarify how hospitals can maintain safe care during ransomware, cloud interruption, device compromise, identity abuse, data leakage and loss of network trust. The paper synthesises recent healthcare security literature, Kingdom of Saudi Arabia regulatory expectations, resilience standards and operational guidance from 2020 to 2025. Four objectives guide the review: to map dominant cyber scenarios affecting high-availability clinical operations; to align response and recovery practices with Kingdom of Saudi Arabia cybersecurity and privacy obligations; to define maturity levels that can be assessed by hospital leaders; and to propose measurable indicators for continuous improvement. The proposed model has five domains: governance and clinical command, detection and security operations, containment and clinical downtime, recovery engineering, and learning with compliance evidence. The review argues that maturity is achieved when hospitals can preserve patient safety, protect sensitive health data, communicate decisions, restore priority systems within tested recovery objectives and prove compliance through auditable records. The model offers a practical route for Kingdom of Saudi Arabia hospitals seeking resilient digital transformation under national cybersecurity and data protection expectations.