NDLI: Developing a Risk Analysis Framework for Hospital Information Security Management

Content Provider	IEEE Xplore Digital Library
Author	Chi-Chang Chang Pei-Ran Sun Sun-Long Cheng Ruey-Shin Chen Kuo-Hsiung Liao
Copyright Year	2009
Abstract	The purpose of this paper is to develop the hospital information security risk framework and to raise organizational risk sense and effective decision making. This study adopted the ISO27799 with the ten controls items for risk management. In order to make sure the feasibility of the proposed framework, we conducted a field study for a medical center to investigate the risk of identification, analyses, measurement and control, respectively. Based on the result, the proposed framework be able to elicit the real risk attitude of each stakeholder more accurate than the Riskit model. Additionally, it implicated a great diversity of human decision behavior uncertainty under risky environment. According to the review of the risk experiences, it can know the potential incident well by investigate into the risk cognition of stakeholders more in detail. Further, it not only can realize the more accurate potential risk incident by utilize the non-parameter method, but also achieve the purpose of shift risk and control losses. The proposed framework can deal with information security risk about hospital-wide by considering stakeholders’ decision positions and behavior attribute, and provide decision makers the effective support for quality decision making. Finally, the implications of the research findings could use and to probing into other similar decision making issue under risk.
Starting Page	1047
Ending Page	1052
File Size	618353
Page Count	6
File Format	PDF
ISBN	9781424452095
DOI	10.1109/NCM.2009.268
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-08-25
Publisher Place	South Korea
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Industrial economics Data security Decision making Medical services ISO27799 Riskit model Information management Risk analysis Environmental economics The non-parameter method Hospitals Hospital information security Information security Risk management
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Stakeholders' Perceptions on Hospital Information Security Risk Analysis in Taiwan

Information Security Risk Assessment in Healthcare: The Experience of an Italian Paediatric Hospital

Developing Road Maps for Financial Decision Making by CHAID Decision Tree: CHAID Decision Tree Application

Simulation based decision-making for hospital pharmacy management

An Exploration of Risk Factors Selecting for Hospital Information Security through NGT Method

Towards an Integrated Platform for Improving Hospital Risk Management

Mining Rules for Risk Factors on Blood Stream Infection in Hospital Information System

Information management in hospitals: an integrating approach

Austin-travis county health department's information system

Developing a Risk Analysis Framework for Hospital Information Security Management

Similar Documents

Stakeholders' Perceptions on Hospital Information Security Risk Analysis in Taiwan

Information Security Risk Assessment in Healthcare: The Experience of an Italian Paediatric Hospital

Developing Road Maps for Financial Decision Making by CHAID Decision Tree: CHAID Decision Tree Application

Simulation based decision-making for hospital pharmacy management

An Exploration of Risk Factors Selecting for Hospital Information Security through NGT Method

Towards an Integrated Platform for Improving Hospital Risk Management

Mining Rules for Risk Factors on Blood Stream Infection in Hospital Information System

Information management in hospitals: an integrating approach

Austin-travis county health department's information system

Developing a Risk Analysis Framework for Hospital Information Security Management