A decision methodology for managing operational efficiency and information disclosure risk in healthcare processes

Decision Support Systems

Volumn 57, Issue 1, 2014, Pages 406-416

  Bai, Xue ^a   Gopal, Ram ^a   Nunez, Manuel ^a   Zhdanov, Dmitry ^a  

^a UNIVERSITY OF CONNECTICUT   (United States)

Author keywords

Control; Healthcare processes; Information disclosure; Optimization; Risk; Workflow efficiency

Indexed keywords

DECISION MAKING METHODOLOGY; DECISION SUPPORT MODELS; HEALTHCARE ORGANIZATIONS; HEALTHCARE PROCESS; INFORMATION DISCLOSURE; INFORMATION SECURITY REQUIREMENTS; OPERATIONAL EFFICIENCIES; THROUGHPUT OPTIMIZATION;

CONTROL; DECISION MAKING; DECISION SUPPORT SYSTEMS; EFFICIENCY; HEALTH CARE; OPTIMIZATION; RISK ASSESSMENT; RISKS; SAFETY ENGINEERING; SECURITY OF DATA;

PROCESS CONTROL;

EID: 84892369906     PISSN: 01679236     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.dss.2012.10.046     Document Type: Article

References (55)

1. American Hospital Association The State of America's Hospitals - Taking the Pulse: Findings from the 2006 AHA Survey of Hospital Leaders 2007
2. S. Ariss Computer monitoring: benefits and pitfalls facing management Information Management 39 7 2002 553 558 (Pubitemid 34704309)
3. P.V. Asaro, and J.E. Ries Data mining in medical record access logs 2001 American Medical Informatics Association Annual Symposium (AMIA) 2001 855
4. X. Bai, R. Gopal, M. Nunez, and D. Zhdanov On the prevention of fraud and privacy exposure in process information flow INFORMS Journal on Computing 24 3 2012 416 432
5. J. Barkley Application engineering in health care Proceedings of the 2nd Annual CHIN Summit 1995
6. R.C. Barrows, and P.D. Clayton Privacy, confidentiality, and electronic medical records Journal of the American Medical Informatics Association 3 2 1996 139 148 (Pubitemid 126445018)
7. R. Bose Knowledge management-enabled health care management systems: capabilities, infrastructure, and decision-support Expert Systems with Applications 24 1 2003 59 71 (Pubitemid 35452265)
8. F.M. Bowens, P.A. Frye, and W.A. Jones Health information technology: integration of clinical workflow into meaningful use of electronic health records Perspectives in Health Information Management 1-18 Fall 2010
9. Claus Boyens, Ramayya Krishnan, and Rema Padman On Privacy-Preserving Access to Distributed Heterogeneous Healthcare Information In Proceedings of the Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 6 - Volume 6 (HICSS '04) 2004 Vol. 6, IEEE Computer Society Washington, DC, USA 60135
10. C.J. Bussler Policy resolution in workflow management systems Digital Technical Journal 6 4 September 1994 26 49
11. C. Clifton, M. Kantarcioglu, A. Doan, G. Schadow, J. Vaidya, A. Elmagarmid, and D. Suciu Privacy-preserving data integration and sharing The 9th ACM SIGMOD Workshop on Research Issues in Data Mining and Knowledge Discovery (DMKD'04) 2004 19 26
12. A. Colantonio, R.D. Pietro, A. Ocello, and N.V. Verde A new role mining framework to elicit business roles and to mitigate enterprise risk Decision Support Systems 50 4 2011 715 731
13. E.J. Coyne Role engineering C.E. Youman, R.S. Sandhu, E.J. Coyne, Of the First ACM Workshop on Role-based Access Control (RBAC'95), Number 4 1996 ACM New York, NY
14. G.J. de Moor, B. Claerhout, and F. de Meyer Privacy enhancing technologies: the key to secure communication and management of clinical and genomic data Methods of Information in Medicine 42 2003 148 153 (Pubitemid 36637322)
15. G.T. Duncan, and D. Lambert Disclosure-limited data dissemination (with discussion) Journal of the American Statistical Association 81 1986 10 28
16. G.T. Duncan, and D. Lambert The risk of disclosure of microdata Journal of Business and Economic Statistics 7 1989 207 217
17. A. Ferreira, R. Cruz-Correia, L. Antunes, P. Farinha, E. Oliveira-Palhares, D.W. Chadwick, and A. Costa-Pereira How to break access control in a controlled manner Proceedings of the 19th IEEE Symposium on Computer-Based Medical Systems (CBMS'06) 2006 IEEE Computer Society Washington, DC 847 854
18. S.E. Fienberg, U.E. Makov, and R.J. Steele Disclosure limitation using perturbation and related methods for categorical data (with discussion) Journal of Official Statistics 14 1998 485 512
19. R.J. Gallagher, S. Sengupta, G. Hripcsak, R.C. Barrows, and P.D. Clayton An audit server for monitoring usage of clinical information systems 1998 American Medical Informatics Association Annual Symposium (AMIA) 1998 1002
20. M.R. Garey, and D.S. Johnson Computers and Intractability: A Guide to the Theory of NP-Completeness 2002 W.H. Freeman and Company
21. R. Garfinkel, R.D. Gopal, and P.B. Goes Privacy protection of binary confidential data against deterministic, stochastic, and insider threat Management Science 48 2002 749 764 (Pubitemid 34799259)
22. G. Goncalves, and A. Poniszewska-Maranda Role engineering: from design to evolution of security schemes Journal of Systems and Software 81 8 August 2008 1306 1326
23. D. Gritzalis A baseline security policy for distributed healthcare information systems Computers & Security 16 8 1997 709 719 (Pubitemid 127437031)
24. D. Gross, J.F. Shortle, J.M. Thompson, and C.M. Harris Fundamentals of Queueing Theory fourth edition 2008 John Wiley & Sons, Inc. New York
25. J. Gulcher, K. Kristjansson, H. Gudbjartsson, and K. Stefansson Protection of privacy by third-party encryption in genetic research European Journal of Human Genetics 8 2000 739 742
26. B. Guttman, and E.A. Roback An Introduction to Computer Security. The Nist Handbook 1995 Diane Pub Co.
27. F. Hansen, and V. Oleshchuk Spatial role-based access control model for wireless networks (2003) Proceedings of the 58th IEEE Vehicular Technology Conference (VTC'03) volume 3 2003 IEEE Computer Society
28. J.V. Hansen, P.B. Lowry, R.D. Meservy, and D.M. McDonald Genetic programming for prevention of cyberterrorism through dynamic and evolving intrusion detection Decision Support Systems 43 4 2007 1362 1374 (Pubitemid 47225189)
29. Q. He, and A.I. Antón A framework for modeling privacy requirements in role engineering International Workshop on Requirements Engineering for Software Quality (REFSQ 2003), Klagenfurt, Austria June 16-17 2003
30. HIPAA Standards for privacy of individually identifiable health information. 45 C.F.R. Parts 160 and 164 Health Insurance Portability and Accountability Act (HIPAA) 2002
31. H.R. 1 (111th): American Recovery and Reinvestment Act of 2009. http://www.govtrack.us/congress/bills/111/hr1.
32. J. Hu, and A.C. Weaver A dynamic, context-aware security infrastructure for distributed healthcare applications Proceedings of Pervasive Security, Privacy and Trust (PSPT2004), Boston, MA August 2004
33. W. Hummer, P. Gaubatz, M. Strembeck, U. Zdun, and S. Dustdar An integrated approach for identity and access management in a SOA context Proceedings of the 16th ACM Symposium on Access Control Models and Technologies (SACMAT), Innsbruck, Austria June 2011
34. P.C.K. Hung Towards a privacy access control model for e-healthcare services The Third Annual Conference on Privacy, Security and Trust October, 2005
35. ISACA Control Objectives for Information and Related Technology (COBIT) 2007 ISACA & IT Governance Institute
36. B. Kaplan Evaluating informatics applications - clinical decision support systems literature review International Journal of Medical Informatics 64 1 2001 15 37 (Pubitemid 32982864)
37. Y. Lu, Y. Xiao, A. Sears, and J. Jacko A review and a framework of handheld computer adoption in healthcare International Journal of Medical Informatics 74 5 2005 409 422 (Pubitemid 40694204)
38. Y.A. Lussier, R. Williams, J. Li, S. Jalan, T. Borlawsky, E. Stern, and I. Kohli Partitioning knowledge bases between advanced notification and clinical decision support systems Decision Support Systems 43 4 2007 1274 1286 (Pubitemid 47223462)
39. S.T. Mohajer Former UCLA Hospital Worker Admits Selling Records 2008 Associated Press Available at www.breitbart.com/article.php?id= D94Q8LJ80&show-article=1
40. M. Nunez, R. Garfinkel, and R.D. Gopal Stochastic protection of confidential information in statistical databases: a hybrid of query restriction and data perturbation Operations Research 55 2007 890 908 (Pubitemid 351159536)
41. G. Pallapa, N. Roy, and S. Das Precision: privacy enhanced context-aware information fusion in ubiquitous healthcare Software Engineering for Pervasive Computing Applications, Systems, and Environments 10 2007 20 26
42. L. Portnoy, E. Eskin, and S. Stolfo Intrusion detection with unlabeled data using clustering Of ACM CSS Workshop on Data Mining Applied to Security (DMSA-2001) 2001
43. K Price. Host-based misuse detection and conventional operating systems' audit data collection. Master's Thesis, Purdue University, 1997.
44. S. Rehm, and S. Kraft Electronic medical records: the FPM vendor survey Family Practice Management 8 1 2001 45 54
45. J.F. Reid, I. Cheong, M.P. Henricksen, and J. Smith A novel use of RBAC to protect privacy in distributed health care information systems R. Safavi-Naini, J. Seberry, Proceedings of 8th Australasian Conference on Information Security and Privacy (ACISP 2003), Wollongong July 9-11 2003
46. R. Sandhu, D. Ferraiolo, and R. Kuhn The NIST model for role-based access control: towards a unified standard, in: Proceedings of the Fifth ACM workshop on Role-based Access Control (RBAC '00) 2000 ACM New York, NY, USA pp. 47-63
47. J. Stanton, K. Stam, P. Mastrangelo, and J. Jolton Analysis of end user security behaviors Computers & Security 2005 124 133 (Pubitemid 40583824)
48. M. Tentori, J. Favela, and M.D. Rodriguez Privacy-aware autonomous agents for pervasive healthcare Intelligent Systems, IEEE 21 6 2006 55 62 (Pubitemid 44936722)
49. W. Tolone, T. Pai, G.J. Ahn, and S.P. Hong Access control in collaborative systems ACM Computing Surveys 37 1 March 2005 29 41 (Pubitemid 41246321)
50. P.M. Vieira-Marques, S. Robles, J. Cucurull, R.J. Cruz-Correia, G. Navarro, and R. Marti Secure integration of distributed medical data using mobile agents Intelligent Systems, IEEE 21 6 2006 47 54 (Pubitemid 44936721)
51. C. Vroom, and R. von Solms Towards information security behavioural compliance Computers & Security 23 3 2004 191 198
52. J. Wainer, P. Barthelmess, and A. Kumar W-RBAC - a workflow security model incorporating controlled overriding of constraints International Journal of Cooperative Information Systems 12 4 2003 455 485 (Pubitemid 38000660)
53. W.T. Yue, and M. ÇakanyIldIrIm A cost-based analysis of intrusion detection system configuration under active or passive response Decision Support Systems 50 1 December 2010 21 31
54. X. Zhao, and M.E. Johnson Access governance: flexibility with escalation and audit Proceedings of 43rd Hawaii International Conference on System Sciences 2010 1 13
55. H. Zo, D.L. Nazareth, and H.K. Jain Security and performance in service-oriented applications: trading off competing objectives Decision Support Systems 50 1 2010 336 346