Internal threats on information system security in Iraq hospitals

Abstract

Managing security of medical information is currently experiencing significant challenges. "People issue" and "organization issue" have been identified as the most important challenges in this field. An organization internal threats have been considered as a serious danger which arise when the insiders commit fraud or steal sensitive information for personal monetary gain or to seek revenge. The organization is vulnerable to such attacks when the employees are compromising the organization’s security to get jobs done. On top of them, human resource managing is a daunting task especially when the organization has consultants, management personnel, partners, and other types of employees as well as a complex operational infrastructure. Insider attacks incur unfathomable losses to the organization through loss of revenue, reputation, intellectual property, and even human life. As such, it is vital that the information system’s security management is secured and maintained regardless of the multitude of human factors involved. This paper analyze the internal organizational human factors that could cause an information security breach in Iraq hospitals. We collected 301 samples from internal officers of 5 major publicly held hospitals in Iraq to examine the malicious human factors (MHF) that threatening the patients’ personal information and measure the (MHF) to identify the most influential factors