Universiti Teknologi Malaysia Institutional Repository

Threats to health information security

Samy, Ganthan Narayana and Ahmad, Rabiah and Ismail, Zuraini (2009) Threats to health information security. In: 5th International Conference on Information Assurance and Security, 2009, Xi'an, China.


Official URL: http://dx.doi.org/10.1109/IAS.2009.312


The purpose of this paper is to identify the threats that exist in Healthcare Information Systems (HIS). The study has been carried out in three different departments namely, Information Technology Department (ITD), Medical Record Department (MRD) and X-Ray Department in one of the leading government supported hospital in Malaysia. The hospital was equipped with Total Hospital Information System (THIS) environment. The data were collected using in-depth structured interviews. The study identified 22 types of threats according to major threat categories based on ISO/IEC 27002 (ISO 27799:2008). The result shows the most critical threat for the THIS is the power failure. In addition, acts of human error or failure threat also show high frequency of occurrence. The contribution of the paper will be categorization of threats in HIS and can be used to design and implement effective security systems and policies in healthcare setting.

Item Type:Conference or Workshop Item (Paper)
Subjects:Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:Computer Science and Information System (Formerly known)
ID Code:16069
Deposited By: Mrs Liza Porijo
Deposited On:18 Oct 2011 09:40
Last Modified:18 Oct 2011 09:40

Repository Staff Only: item control page