Healthcare and Security: Understanding and Evaluating the Risks

Baker, Aubrey; Vega, Laurian; DeHart, Tom; Harrison, Steve

doi:10.1007/978-3-642-21716-6_11

Cited by 6 publications

(3 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We also made use of the literature analysis methodology by conducting a systematic review of previous research on data privacy and security where healthcare data breach incidents were cited. In particular, we made use of the earlier work of Kobus (2012), Laja (2011), Johnson and Willey (2011), Walker (2011), Baker et al (2011), andKierkegaard (2012). Further, as highlighted previously, earlier conceptual research, in the form of data breach taxonomies has also guided us in establishing our model for healthcare data breach causation and prevention.…”

Section: Research Methodology and Data Collectionmentioning

confidence: 97%

“…Desktop computer with unencrypted data was stolen from Sutter Medical Foundations, Sacramento, CA. (PRCH, 2012;Baker et al, 2011) Unencrypted backup tapes were stolen from a car, exposing the health and personal information of more than 4.9 million patients.…”

Section: Data Breach Incident Referencementioning

confidence: 99%

“…Optimizing violation • A curious medical staff was caught examining the health records of friends and family members (Baker et al, 2011)…”

Section: Organizational Influencementioning

confidence: 99%

See 2 more Smart Citations

Human and Organizational Factors of Healthcare Data Breaches

Kamoun

Nicho

2014

International Journal of Healthcare Information Systems and Informatics

View full text Add to dashboard Cite

Over the past few years, concerns related to healthcare data privacy have been mounting since healthcare information has become more digitized, distributed and mobile. However, very little is known about the root cause of data breach incidents; making it difficult for healthcare organizations to establish proper security controls and defenses. Through a systematic review and synthesis of data breaches literature, and using databases of earlier reported healthcare data breaches, the authors re-examine and analyze the causal factors behind healthcare data breaches. The authors then use the Swiss Cheese Model (SCM) to shed light on the technical, organizational and human factors of these breaches. The author's research suggests that incorporating the SCM concepts into the healthcare security policies and procedures can assist healthcare providers in assessing the vulnerabilities and risks associated with the maintenance and transmission of protected health information.

show abstract

Section: Research Methodology and Data Collectionmentioning

confidence: 97%

Section: Data Breach Incident Referencementioning

confidence: 99%

See 1 more Smart Citation

Human and Organizational Factors of Healthcare Data Breaches

Kamoun

Nicho

2014

International Journal of Healthcare Information Systems and Informatics

View full text Add to dashboard Cite

show abstract

SOK: Evaluating Privacy and Security Vulnerabilities of Patients’ Data in Healthcare

Tazi

Dykstra²,

Rajivan

et al. 2022

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Sensitive information is intrinsically tied to interactions in healthcare, and its protection is of paramount importance for achieving high-quality patient outcomes. Research in healthcare privacy and security is predominantly focused on understanding the factors that increase the susceptibility of users to privacy and security breaches. To understand further, we systematically review 26 research papers in this domain to explore the existing user studies in healthcare privacy and security. Following the review, we conducted a card-sorting exercise, allowing us to identify 12 themes integral to this subject such as "Data Sharing," "Risk Awareness," and "Privacy." Further to the identification of these themes, we performed an in-depth analysis of the 26 research papers report on the insights into the discourse within the research community about healthcare privacy and security, particularly from the user perspective. MotivationSecurity and privacy integration in the healthcare domain is essential to protect patients' data [12], considering medical records include sensitive health and personal information. The healthcare industry is often a prime target for cybercriminals considering that these data sets could contain a plethora of sensitive information such as social security numbers, birth dates, employment information, emergency contacts, and insurance and billing data; these data are also notoriously difficult to monitor or safeguard after a breach [23]. Furthermore, healthcare data are lucrative on the black market. Sahi et al. noted

show abstract

SoK: Analyzing Privacy and Security of Healthcare Data from the User Perspective

Tazi,

Nandakumar,

Dykstra

et al. 2024

ACM Trans. Comput. Healthcare

View full text Add to dashboard Cite

Interactions in healthcare, by necessity, involve sharing sensitive information to achieve high-quality patient outcomes. Therefore, sensitive data must be carefully protected. This paper explores existing privacy and security research conducted in the context of healthcare organizations. We conducted a systematic literature review of N = 1553 papers that examine the security and privacy of healthcare data and focus on 80 papers addressing human factors. Key findings show that much of the healthcare security and privacy research is focused on technology (44.11%, 712 papers), with a lack of emphasis on the human element (4.96%, 80 papers). In the subset of user studies, we find that patients and the general public express concerns about privacy and security with technologies like electronic health records (EHRs). Furthermore, our analysis shows that healthcare professionals often have low awareness of risks related to data security. Additionally, our analysis revealed that most research focuses narrowly on large hospitals, neglecting private practices and the unique challenges they face. We conclude by identifying research gaps and providing potential solutions to enable robust data security for sensitive patient data.

show abstract

Healthcare and Security: Understanding and Evaluating the Risks

Cited by 6 publications

References 9 publications

Human and Organizational Factors of Healthcare Data Breaches

Human and Organizational Factors of Healthcare Data Breaches

SOK: Evaluating Privacy and Security Vulnerabilities of Patients’ Data in Healthcare

SoK: Analyzing Privacy and Security of Healthcare Data from the User Perspective

Contact Info

Product

Resources

About