Workarounds to Computer Access in Healthcare Organizations: You Want My Password or a Dead Patient?

Studies in Health Technology and Informatics

Volumn 208, Issue , 2015, Pages 215-220

  Koppel, Ross ^a   Smith, Sean ^b   Blythe, Jim ^c   Kothari, Vijay ^b  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

^b DARTMOUTH COLLEGE   (United States)

^c UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

Author keywords

computer access; cyber security; Workarounds; workflow

Indexed keywords

HEALTH CARE; PERSONAL COMPUTING; SECURITY OF DATA;

COMPUTER ACCESS; CYBER SECURITY; HEALTHCARE ORGANIZATIONS; HEALTHCARE WORKERS; SECURITY RULES; SECURITY TECHNOLOGY; WORKAROUNDS; WORKFLOW;

MEDICAL COMPUTING;

COMPUTER SECURITY; DOCTOR PATIENT RELATION; HEALTH CARE ORGANIZATION; HUMAN; HUMAN EXPERIMENT; INTERVIEW; MACHINE; MEDICAL PERSONNEL; MOTIVATION; PERCEPTION; WORKPLACE; ATTITUDE TO COMPUTERS; HEALTH PERSONNEL ATTITUDE; INFORMATION PROCESSING;

ATTITUDE OF HEALTH PERSONNEL; ATTITUDE TO COMPUTERS; COMPUTER SECURITY; FOCUS GROUPS; HUMANS; INTERVIEWS AS TOPIC; WORKPLACE;

EID: 84924808471     PISSN: 09269630     EISSN: 18798365     Source Type: Book Series    
DOI: 10.3233/978-1-61499-488-6-215     Document Type: Conference Paper

References (19)

1. A. Beautement, M.A. Sasse, and M. Wonham, "The Compliance Budget: Managing Security Behaviour in Organisations," Proc. 2008 New Security Paradigms Workshop, ACM, 2008, pp. 47-58.
2. L.F. Cranor and S. Garfinkel, eds. Security and Usability. O'Reilly, 2005.
3. E. Felten, "Too Stupid to Look the Other Way," Freedom to Tinker, 29 Oct. 2002; https://freedom-totinker. com/blog/felten/too-stupid-look-other-way.
4. M. Harrison, R. Koppel, and S. Bar-Lev, "Unintended Consequences of Information Technologies in Health Care - An Interactive Sociotechnical Analysis," J. Am Medical Informatics Assoc., vol. 14, no. 5, 2007, pp. 542-549.
5. C. Herley, "So Long, and No Thanks for the Externalities: The Rational Rejection of Security Advice by Users," Proc. New Security Paradigms Workshop, ACM, 2009, pp. 133-144.
6. P. Inglesant and M.A. Sasse, "The True Cost of Unusable Password Policies: Password Use in the Wild," Proc. SIGCHI Conf. Human Factors in Computing Systems, ACM, 2010, pp. 383-392.
7. B.J. Jansen, A. Spink, and T. Saracevic, "Real Life, Real Users, and Real Needs: A Study and Analysis of User Queries on the Web," Information Processing & Management, vol. 36, no. 2, 2000, pp. 207-227.
8. S. Riley. "Password Security: What Users Know and What They Actually Do." Usability News. 8(1), February 2006.
9. C. Sinsky et al., "Comparative User Experiences of Health IT Products: How User Experiences Would Be Reported and Used." Inst. Medicine of the Nat'l Academies, 2012.
10. J Blythe. R. Koppel, S.W. Smith. "Circumvention of Security: Good Users Do Bad Things" IEEE Security and Privacy. Sept/Oct, 2013. pp.80-83
11. R. Koppel et al., "Workarounds to Barcode Medication Administration Systems: Their Occurrences, Causes, and Threats to Patient Safety," J. Am Medical Informatics Assoc., 15(4) 2008, pp. 408-423.
12. S.W. Smith and R. Koppel, "Healthcare Information Technology's Relativity Problems: A Typology of How Patients' Physical Reality, Clinicians' Mental Models, and Healthcare Information Technology Differ," J. Am. Medical Informatics Assoc., 2013; doi:10.1136/amiajnl-2012-001419.
13. E. McCann. "OIG: Certified EHRs aren't so secure." Health Care IT News. August 5, 2014. http://www.healthcareitnews.com/news/oig-certified-ehrs-arent-so-secure
14. R. Dhamija and A. Perrig. "Deja Vu: A User Study Using Images for Authentication." Proceedings of the 9th USENIX Security Symposium, 2000.
15. R.R. Heckle. "Security Dilemma: Healthcare Clinicians at Work." IEEE Security and Privacy. 9(6):14 - 19. 2011.
16. R. Koppel et al. "Role of computerized physician order entry systems in facilitating medication errors." JAMA: J. Amer Medical Assoc. Mar 9, 2005. 293:10, pp.1197-1203
17. S. Sinclair and S.W. Smith, "What's Wrong with Access Control in the Real World," IEEE Security & Privacy, vol. 8, no. 4, 2010, pp. 74-77.
18. M. Harrison et al. "Unintended Consequences of Information Technologies in Health Care - An Interactive Sociotechnical Analysis." J. Am Medical Informatics Assoc. 14(5): 542-549. 2005.
19. V. Shaffer et al. "Why Do Patients Derogate Physicians Who Use a Computer-Based Diagnostic Support System?" Medical Decision Making. 33: 108 2013.