Monitoring information security risks within health care

Computers and Security

Volumn 37, Issue , 2013, Pages 31-45

  Van Deursen, Nicole ^a   Buchanan, William J ^a   Duff, Alistair ^a  

^a EDINBURGH NAPIER UNIVERSITY   (United Kingdom)

Author keywords

Delphi method; Health care; Information security; Patient privacy; Risk management; Sociotechnical information security

Indexed keywords

DELPHI METHOD; EXPERT ELICITATION; HEALTH CARE DATUM; INFORMATION SECURITY RISKS; MONITORING INFORMATION; PATIENT PRIVACIES; SECURITY INCIDENT; SOCIOTECHNICAL;

HEALTH CARE; HOSPITAL DATA PROCESSING; RISK MANAGEMENT; SECURITY OF DATA;

RISK PERCEPTION;

EID: 84877963990     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2013.04.005     Document Type: Article

References (35)

1. A. Appari, and M.E. Johnson Information security and privacy in healthcare: current state of research International Journal Internet and Enterprise Management 6 2010 279 310
2. P.V. Asaro, R.L. Herting, A.C. Roth, and M.R. Barnes Effective audit trails - a taxonomy for determination of information requirements Annual symposium of the American-medical-informatics-association, Nov 06-10 1999 Hanley & Belfus Inc Washington, D.C. 663 665
3. F. Bjork Institutional theory: a new perspective for research into IS/IT security in organisations Proceedings of the 37th Hawaii international conference on system sciences 2004 IEEE Hawaii
4. M. Brann, and M. Mattson Toward a typology of confidentiality breaches in health care communication: an ethic of care analysis of provider practices and patient perceptions Health Communication 16 2004 231 251
5. J. Carthey, and J. Clarke Implementing human factors in healthcare. Patient safety first! 2010 [Online] Available from: http://www. patientsafetyfirst.nhs.uk/ashx/Asset.ashx?path=/Intervention-support/Human Factors How-to Guide v1.2.pdf [Accessed 16.01.13]
6. R.T. Clemen, and R.L. Winkler Combining probability distributions from experts in risk analysis 1997 Duke University Durham, NC
7. L. Coles-kemp Information security management: an entangled research challenge Information Security Technical Report 14 2009 181 185
8. CompTIA 9th annual information security trends study 2012 CompTIA Inc
9. A. Da veiga, and J.H.P. Eloff A framework and assessment instrument for information security culture Computers & Security 29 2010 196 207
10. Department of Health Checklist for reporting, managing and investigating information governance serious untoward incidents [Online] Information Governance Policy 2010 Available from: https://www.igt.connectingforhealth.nhs. uk/KnowledgeBaseNew/DH-NHS%20IG%20-%20SUI%20Checklist.pdf [Accessed 08.05.2013]
11. G. Dhillon, and J. Backhouse Current directions in IS security research: towards socio-organisational perspectives Information Systems Journal 11 2001 127 153
12. P. Dourish, and K. Anderson Collective information practice: exploring privacy and security as social and cultural phenomena Human-Computer Interaction 21 2006 319 342 (Pubitemid 44430615)
13. M.P. Gagnon, N. Shaw, C. Sicotte, L. Mathieu, Y. Leduc, and J. Duplantie Users' perspectives of barriers and facilitators to implementing EHR in Canada: a study protocol Implementation Science 4 2009
14. M. Gerber, and R. von solms Management of risk in the information age Computers and Security 24 2005 16 30 (Pubitemid 40415397)
15. L.A. Gordon, M.P. Loeb, and W. Lucyshyn Sharing information on computer systems security: an economic analysis Journal of Accounting and Public Policy 22 2003 461 485 (Pubitemid 37491796)
16. HHS Breaches affecting 500 or more individuals [Online] 2012 U.S. Department of Health & Human Services Available from: http://www.hhs.gov/ ocr/privacy/hipaa/administrative/breachnotificationrule/breachtool.html [Accessed 16.09.12]
17. G. Hofstede Culture's consequences. Comparing values, behaviors, institutions and organisations across nations 2001 Sage Publications Thousand Oaks, California
18. J.D. Howard, and T.A. Longstaff A common language for computer security incidents 1998 Sandia National Laboratories
19. D.W. Hubbard How to measure anything: finding the value of «intangibles» in business 2010 Wiley & Sons Hoboken, New Jersey
20. ICO Monetary penalties served to councils for serious email errors 2011 [Online]. Available from: http://www.ico.gov.uk/news/latest-news/2011/monetary- penalties-served-to-councils-for-serious-email-errors-28112011.aspx [Accessed 16.09.12]
21. IGZ/CBP Informatiebeveiliging in ziekenhuizen voldoet niet aan de norm 2008 College Bescherming Persoonsgegevens, Inspectie voor de Gezondheidszorg Den Haag
22. S. Keeney, F. Hasson, and H. Mckenna Consulting the oracle: ten lessons from using the Delphi technique in nursing research Journal of Advanced Nursing 53 2006 205 212 (Pubitemid 43455545)
23. Kroll-fraud-solutions 2010 HIMSS analytics report: security of patient data 2010 Kroll Fraud Solutions
24. J. Landeta Current validity of the Delphi method in social sciences Technological Forecasting and Social Change 73 2006 467 482
25. D. Liu, Y. Ji, and V. Mookerjee Knowledge sharing and investment decisions in information security Decision Support Systems 52 2011 95 107
26. D.B. Parker Fighting computer crime. A new framework for protecting information 1998 Wiley Computer Publishing New York
27. W. Pieters The (social) construction of information security The Information Society: An International Journal 27 2011 326 335
28. Ponemon Second annual benchmark study on patient privacy & data security 2011 Ponemon Institute LLC
29. J. Pulcini, J. Wilbur, J. Allan, C. Hanson, and C.R. Uphold Determining criteria for excellence in nurse practitioner education: use of the Delphi technique Nursing Outlook 54 2006 102 110 (Pubitemid 43589531)
30. G. Rowe, and G. Wright Expert opinions in forecasting: the role of the Delphi technique J. Armstrong, Principles of forecasting 2001 Kluwer Academic Boston
31. M. Siponen Information security standards focus on the existence of process, not its content Communications of the ACM 49 2006
32. T. Sumsion The Delphi technique: an adaptive research tool British Journal of Occupational Therapy 61 1998 153 156 (Pubitemid 128452556)
33. E.D. Thompson, and M.L. Kaarst-brown Sensitive information: a review and research agenda Journal of the American Society for Information Science and Technology 56 2005 245 257 (Pubitemid 40245375)
34. P.L. Williams, and C. Webb Clinical supervision skills - a Delphi and critical incident technique study Medical Teacher 16 1994 139 157
35. S.M. Williams An international investigation of associations between societal variables and the amount of disclosure on information and communication problems: the case of Y2K The International Journal of Accounting 39 2004