The Impact of the Security Competency on “Self-Efficacy in Information Security” for Effective Health Information Security in Iran

Abstract

The security effectiveness based on users' behaviors is becoming a top priority of Health Information System (HIS). In the first step of this study, through the review of previous studies 'Self-efficacy in Information Security' (SEIS) and 'Security Competency' (SCMP) were identified as the important factors to transforming HIS users to the first line of defense in the security. Subsequently, a conceptual model was proposed taking into mentioned factors for HIS security effectiveness. Then, this quantitative study used the structural equation modeling to examine the proposed model based on survey data collected from a sample of 263 HIS users from eight hospitals in Iran. The result shows that SEIS is one of the important factors to cultivate of good end users' behaviors toward HIS security effectiveness. However SCMP appears a feasible alternative to providing SEIS. This study also confirms the mediation effects of SEIS on the relationship between SCMP and HIS security effectiveness. The results of this research paper can be used by HIS and IT managers to implement their information security process more effectively.

Structural Model of the Healthcare Information Security Behavior of Nurses Applying Protection Motivation Theory

“…It is believed that nurses currently comply with the HIS recommendations and enforcement rules proposed by medical institutions and that compliance can prevent the leakage of healthcare information. Kajtazi et al [24] also showed that greater self-efficacy related to compliance leads to improved HIS intentions, whereas Shahri et al [11] showed a similar correlation with improved HIS behavior. Our results indicate that it is necessary for interim nurse managers and supervisors to apply achievement-oriented leadership rather than directed leadership [9], thereby exhibiting confidence in nurses who voluntarily perform HIS behavior for its inherent purpose.…”

“…In this study, protection motivation was defined as the extent to which nurses are able to cope with losses arising from HIS threats, according to the results of prior studies [5,9,11,12,14,21,[24][25][26][27]31], leading to the following hypothesis: Hypothesis 4 (H4). The coping appraisal of HIS by nurses will affect their behavior.…”

“…Therefore, it is important for nurses who directly deal with healthcare information to recognize the importance of HIS [9] and to establish a willingness to practice it [10]. HIS education has been shown to raise nurses' awareness of the issue and has a positive impact on practice [11,12]. For instance, it has been found that in situations involving increased awareness of the release of healthcare information that could potentially cause irreparable damage to a patient [13], leakage affecting HIS is more likely [5].…”

“…In addition, greater self-efficacy leads to greater success of HIS [12,14]. However, physical or environmental obstacles have a negative impact when trying to secure healthcare information [11]. Nurses are hesitate to HIS behavior during the transfer of a patient to another department for examination or when performing nursing services [10].…”

Mapping the Psychosocialcultural Aspects of Healthcare Professionals’ Information Security Practices: Systematic Mapping Study

“…The reviewed frameworks [8,[14][15][16]31,38,41,44,45,[49][50][51][52][53][54][55][56][57][58][59][60][61][62][63][64][65][66] were not fully comprehensive. Meanwhile, security issues are affected by all these aspects and not just psychological, social, cultural, or sociodemographic aspects alone [38].…”