Technical means for securing health information

Roulet, Daniel de; Scherrer, Jean-Raoul

doi:10.1016/s0020-7101(96)01225-1

Cited by 3 publications

(2 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Thus, implementing such working lists, linked with a general repository of identities, increases the complexity of the management of access controls. It results in organizational costs in addition to traditional ones: hardware, software and network procedures [18]. If the initialization of the lists linking users to functional groups is a huge but feasible task, the updating procedures need to be very careful.…”

Section: Discussionmentioning

confidence: 99%

Confidentiality Issues within a Clinical Information System: Moving from Data-driven to Event-driven Design

Staccini

Joubert²,

Fieschi³

et al. 1999

Methods Inf Med

View full text Add to dashboard Cite

Within a hospital, the moving of medical information systems from retrospective data-gathering methods to prospective clinical information systems raises the question of the confidentiality of patient data. A method of improving the traditional matrix model usually used to achieve access controls is described. The event-driven model refers to the way a security system ensures that a given user has a valid »need-to« relationship to a given patient. Events are defined as the occurrence of specific data that trigger the creation or the updating of the relationship between the identity of a user and the identity of a patient (e. g., admission, discharge, transfer, prescription, and report). The creation and the deletion of the relationships between users and patients are based on numerous repositories and working lists of patients. This implementation requires an organization of the hospital activities which is able to manage, in a real-time manner, those repositories as closely as possible to the steps occurring during the patient’s care process. Although this approach seems to reasonably fit the dynamic of the care process, it adds significant organizational constraints.

show abstract

Section: Discussionmentioning

confidence: 99%

Confidentiality Issues within a Clinical Information System: Moving from Data-driven to Event-driven Design

Staccini

Joubert²,

Fieschi³

et al. 1999

Methods Inf Med

View full text Add to dashboard Cite

show abstract

“…Network expansion of healthcare service providers promotes the policy of sharing data between related parties [ 17 ], which increases the susceptibility of patient information transferred via electronic forms, including data ownership issues [ 18 ], responsibility for ensuring confidentiality [ 19 ], and responsibility for data integrity [ 20 ]. Health facilities are open public organizations [ 14 ], causing difficulties in access control and physical security [ 21 ], even though they have higher vulnerability to information security risks [ 16 ]. Insider threats posed by people with legitimate access to information systems can come from temporary staff, such as medical students, residents, or interns, who have the same need for access to medical data as permanent employees [ 14 , 16 ].…”

Section: Introductionmentioning

confidence: 99%

Information Security Behavior in Health Information Systems: A Review of Research Trends and Antecedent Factors

et al. 2022

View full text Add to dashboard Cite

This study aims to review the literature on antecedent factors of information security related to the protection of health information systems (HISs) in the healthcare organization. We classify those factors into organizational and individual aspects. We followed the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) framework. Academic articles were sourced from five online databases (Scopus, PubMed, IEEE, ScienceDirect, and SAGE) using keywords related to information security, behavior, and healthcare facilities. The search yielded 35 studies, in which the three most frequent individual factors were self-efficacy, perceived severity, and attitudes, while the three most frequent organizational factors were management support, cues to action, and organizational culture. Individual factors for patients and medical students are still understudied, as are the organizational factors of academic healthcare facilities. More individual factors have been found to significantly influence security behavior. Previous studies have been dominated by the security compliance behavior of clinical and non-clinical hospital staff. These research gaps highlight the theoretical implications of this study. This study provides insight for managers of healthcare facilities and governments to consider individual factors in establishing information security policies and programs for improving security behavior.

show abstract

Antecedent factors of information security behavior in health care providers: a systematic review (Preprint)

Sari¹,

Handayani²,

Hidayanto³

et al. 2022

Preprint

View full text Add to dashboard Cite

BACKGROUND Most data breaches in health care organizations are caused by human factors. The medical environment has specific characteristics that might impact the decision and behavior of their employee, including in performing security practices. OBJECTIVE This study aims to review the literature on antecedent factors of information security behavior in health care organizations based on various stakeholders’ perspectives (clinical staff, non-clinical staff, medical students, and patients) and different types of health care entities (hospital, clinic, medical center, and others). METHODS This review searched academic articles on five online databases (Scopus, PubMed/MedLine, IEEE Xplore, Science Direct, SAGE) using specific keywords until 2022. Studies are selected following the Preferred Reporting Items for Systematic Reviews and Meta-Analyzes (PRISMA) protocol. RESULTS The result identifies antecedent factors that significantly influence the information security behavior of health information system users in various health care organizations. The factors are classified into individual and organizational factors. Top-three frequent individual factors are self-efficacy, perceived severity, and attitude, while frequent organizational factors are management support, cues to action, and organizational culture. Each factor is mapped on two types of security behavior, desirable and undesirable security behavior. CONCLUSIONS More individual factors are found significantly influence security behavior in health care organization. Previous studies in this field are still dominated by security compliance behavior. The researcher, manager of health care providers, and government should consider those factors to improve information security in health information system implementation.

show abstract

Technical means for securing health information

Cited by 3 publications

References 7 publications

Confidentiality Issues within a Clinical Information System: Moving from Data-driven to Event-driven Design

Confidentiality Issues within a Clinical Information System: Moving from Data-driven to Event-driven Design

Information Security Behavior in Health Information Systems: A Review of Research Trends and Antecedent Factors

Antecedent factors of information security behavior in health care providers: a systematic review (Preprint)

Contact Info

Product

Resources

About