Methods for using an exception handling system are provided for dynamically recovering from a workflow exception occurring in a healthcare mobile network communication system. An individual user can access the system through a hand-held mobile device. The system has multiple workflows and at least one mission critical item. Attack tree modeling analyses are performed to identify the mission critical item. Another operation includes writing a plurality of forward recovery rules to protect the mission critical item. The recovery rules are enabled through an engine in communication with the mobile network communication system. The multiple workflows are monitored for indication of a system attack on any one of the multiple workflows. A new workflow is automatically generated upon detection of the system attack. The exception handling system is overlayed on the mobile network. Authorization is provided by the system for the individual user.