Strategic managers and IS professionals who are responsible for specifying, acquiring and producing quality software products are not supported by the endless flow of new international standards, legislation and user requirements. In order to clarify the current situation for everybody concerned with software quality, and especially those interested in usability, there is a need for a new review and evaluation of the various strands that contribute to software quality. By way of review this paper recalls the original software quality factors which were defined twenty years ago by McCall et al. and presents a methodical analysis and synthesis of three modern strands which influence these factors. The three strands relate to software quality, statutory obligations and human-computer interaction. All three strands rely on well respected sources which include the European Council Directive on minimum safety and health requirements for work with display screen equipment, ISO/DIS 9241-10 (1993) and ISO/FDIS 9000-3 (1997). This synthesis produces a new set of quality factors, and the paper provides a new perspective of software usability by showing that the external quality factors in this new set are the usability attributes of a software product. New attributes like suitability, adaptability, functionality, installability and safety are identified and other attributes like usability and integrity are clarified within the three strands.

Software quality is often considered in terms of

Information sharing among different healthcare organizations is critical for efficient and cost effective healthcare service delivery. Healthcare organisations with information systems need to be interconnected to ensure information exchange. Interconnectivity increases exposure to risk of damage, loss and fraud. Security and privacy of patients' information are concerns of all healthcare organizations. These concerns hinder the willingness to share data across different organizations. An objective assessment of organisational security posture is required in order to build trust and confidence among different entities in the e-Healthcare ecosystem. Security metrics are a collection of several measurements taken at different points in time, compared against baseline and interpreted to reveal an understanding. Metrics provides insight, improve visibility and accountability, and can reveal the overall security posture of organisation. The current security assessment practices focus either on measuring security programme effectiveness, auditing or assessment of individual information systems components like networks and software. There are discrepancies in the way security is given meaning and quantified in several other approaches. These discrepancies affect their adoption as programmes to derive trustworthy measurable results. Several security assessment practices not sufficiently address measuring the overall security posture of an organization. For those that do, their assessment results are not meaningfully comparable among different organisations. In this paper we present an analysis of selected approaches, identifying their bias, and propose an approach for developing security metrics to be used for assessing security posture of healthcare organizations. The metrics for this approach shall not be tailored to any specific organisation to ensure comparable results.

Abstract

Abstract