No abstract

No abstract

Information sharing among different healthcare organizations is critical for efficient and cost effective healthcare service delivery. Healthcare organisations with information systems need to be interconnected to ensure information exchange. Interconnectivity increases exposure to risk of damage, loss and fraud. Security and privacy of patients' information are concerns of all healthcare organizations. These concerns hinder the willingness to share data across different organizations. An objective assessment of organisational security posture is required in order to build trust and confidence among different entities in the e-Healthcare ecosystem. Security metrics are a collection of several measurements taken at different points in time, compared against baseline and interpreted to reveal an understanding. Metrics provides insight, improve visibility and accountability, and can reveal the overall security posture of organisation. The current security assessment practices focus either on measuring security programme effectiveness, auditing or assessment of individual information systems components like networks and software. There are discrepancies in the way security is given meaning and quantified in several other approaches. These discrepancies affect their adoption as programmes to derive trustworthy measurable results. Several security assessment practices not sufficiently address measuring the overall security posture of an organization. For those that do, their assessment results are not meaningfully comparable among different organisations. In this paper we present an analysis of selected approaches, identifying their bias, and propose an approach for developing security metrics to be used for assessing security posture of healthcare organizations. The metrics for this approach shall not be tailored to any specific organisation to ensure comparable results.

Mobile technology has experienced a huge acceptance by many users in the current generation. This is due to the benefits offered through its use by individuals and organisations. Similarly, technology adoption studies have widely been used to uncover factors which determine their adoption in different contexts. Some of the scenarios in technology adoption differ due to the specific technology which is under study. For instance, mobile phone technology differs from other computing technologies in several aspects due to its nature i.e. mobility. These differences come along with some different insights concerning the adoption of mobile phones in a particular context. Highlighting important issues on studying the adoption of mobile technology is necessary, especially in developing countries where SMEs are engaging in the usage of mobile phones to accomplish business processes. Thus, this paper provides set of metrics for measuring adoption of mobile phone technology in SMEs. This qualitative study uses a combination of critical literature reviews and interviews conducted by involving key stakeholders of SMEs in Tanzania. This paper shows that among the existing metrics which are used in measuring adoption of other computing technologies, only value creation metric has more realistic grounds to explain the extent of mobile phones adoption in the context of SMEs.

Abstract