Security threats categories in healthcare information systems

Health Informatics Journal

Volumn 16, Issue 3, 2010, Pages 201-209

  Narayana Samy, Ganthan ^a   Ahmad, Rabiah ^a   Ismail, Zuraini ^a  

^a UNIVERSITI TEKNOLOGI MALAYSIA   (Malaysia)

Author keywords

healthcare information systems HIS; information security; risk analysis; threats

Indexed keywords

ADMINISTRATIVE PERSONNEL; ARTICLE; COMPUTER SECURITY; COMPUTER SYSTEM; EQUIPMENT; EVALUATION; HOSPITAL DEPARTMENT; HOSPITAL INFORMATION SYSTEM; HUMAN; INFORMATION PROCESSING; INTERVIEW; MALAYSIA; ORGANIZATION AND MANAGEMENT; PUBLIC HOSPITAL; RISK ASSESSMENT;

ADMINISTRATIVE PERSONNEL; COMPUTER SECURITY; COMPUTER SYSTEMS; DATA COLLECTION; EQUIPMENT FAILURE; EVALUATION STUDIES AS TOPIC; HOSPITAL DEPARTMENTS; HOSPITAL INFORMATION SYSTEMS; HOSPITALS, PUBLIC; HUMANS; INTERVIEWS AS TOPIC; MALAYSIA; RISK ASSESSMENT;

EID: 77957605604     PISSN: 14604582     EISSN: 17412811     Source Type: Journal    
DOI: 10.1177/1460458210377468     Document Type: Conference Paper

References (22)

1. Ayotollahi H., Bath AP, Goodacre S. Paper-based versus computer-based records in the emergency department: staff preferences, expectations, and concerns. Health Infor J 2009 ; 15 (3). 199-211.
2. Healthcare Information and Management Systems Society (HIMSS). Analytics report: security of patient data. USA: Kroll Fraud Solutions, 2008.
3. Maglogiannis I., Zafiropoulos E. Modeling risk in distributed heathcare information systems. 28th Annual International Conference of the IEEE on Engineering in Medical and Biology Society (EMBS), 30 August 2006, New York.
4. Kahn S. and Sheshadri V. Medical record privacy and security in a digital environment. IT Pro 2008 ; 46-52.
5. Narayana Samy G., Ahmad R., Ismail Z. Security threats in healthcare information systems: a preliminary study. In: Bath PA, Day K and Norris T (eds) Proceedings of 13th International Symposium on Health Information Management Research, Auckland, New Zealand October 2008, pp. 233-234. ISBN 978-0-473-14173-8.
6. Im PG and Baskerville LR A longitudinal study of information system threat categories: the enduring problem of human error. ACM SIGMIS 2005 ; 36 (4). 68-79.
7. Health informatics: information security management in health using ISO/IEC 27002 (ISO27799:2008). London: British Standards Institution, 2008.
8. Information technology, security techniques: code of practice for information security management BS ISO/IEC 27002:2005 BS 7799-1:2005. London: British Standards Institution, 2008.
9. Thomas RP Information security risk analysis. Boca Raton, FL: Auerbach, 2005.
10. Jung B., Han I., Lee S. Security threats to internet: a Korean multi-industry investigation. Inf Man 2001 ; 38: 487-498.
11. Bhargava B. and Lilien L. Vulnerabilities and threats in distributed systems. ICDCIT 2004 ; LNCS 3347: 146-157.
12. Jen Yeh Q. and Ting Chang AJ Threats and countermeasures for information system security: a cross-industry study. Inf Man 2007 ; 44: 480-491.
13. Farahmand F., Navathe BS, Sharp PG, Enslow HP Managing vulnerabilities of information systems to security incidents. ACM 2009 ; 348-354.
14. Whitman EM Enemy at the gate: threats to information security. Comm ACM 2003 ; 46 (6). 91-95.
15. Vaast E. Danger is in the eye of the beholders: social representations of information systems security in healthcare. J Strat Inf Syst 2007 ; 16: 130-152.
16. Maglogiannis I., Zafiropoulos E., Platis A., Lambrinoudakis C. Risk analysis of a patient monitoring system using Bayesian network modelling. J Biomed Inf 2006 ; 39: 637-647.
17. Cooper DR and Schindler PS Business research methods. New York: McGraw-Hill, 2008.
18. Whitman EM and Mattord JH Principles of information security. Boston: Thomson Course Technology, 2005.
19. Burke L. and Weill B. Information technology for the health professions. Upper Saddle River, NJ: Pearson Prentice Hall, 2005.
20. Egan M. and Mather T. The executive guide to information security: threats, challenges, and solutions. Indianapolis: Symantec, 2005.
21. Bones E., Hasvold P., Henriksen E., Strandenaes T. Risk analysis of information security in mobile instant messaging and presence system for healthcare. Int J Med Inform 2007 ; 76: 677-687.
22. Risk management AS/NZS 4360:1999. Strathfield, NSW: Standards Association of Australia ; 1999.