Modeling Access Control in Healthcare Organizations

View Sample PDF

Author(s): Efstratia Mourtou (St. Andrew General Hospital, Greece)
Copyright: 2011
Pages: 22
Source title: Certification and Security in Health-Related Web Applications: Concepts and Solutions
Source Author(s)/Editor(s): Anargyros Chryssanthou (Hellenic Data Protection Authority, Greece), Ioannis Apostolakis (National School of Public Health, Greece)and Iraklis Varlamis (Harokopio University of Athens, Greece)
DOI: 10.4018/978-1-61692-895-7.ch002

Keywords: Health Information Systems / Information Security & Privacy / Medical Information Science Reference / Security & Forensics

Purchase

View Modeling Access Control in Healthcare Organizations on the publisher's website for pricing and purchasing information.

Abstract

Since Hospital Information Systems (HIS) are designed to support doctors and healthcare professionals in their daily activities, information security plays a vital role in managing access control. Efficiency and effectiveness of information security policy is crucial, especially when dealing with situations that affect the status and life-history of the patient. In addition, the rules and procedures to follow, in order to provide confidentiality of sensitive information, have to focus on management of events on any table of the HIS. On the other hand, control and statement constraints, as well as events and security auditing techniques, play also an important role, due to the heterogeneity of healthcare professionals’ roles, actions and physical locations, as well as to the specific characteristics and needs of the healthcare organizations. This chapter will first explore issues in managing access control and security of healthcare information by reviewing the possible threats and vulnerabilities as well as the basic attributes of the hospital’s security plan. The authors will then present a hierarchical access model that, from a security policy perspective, refers to data ownership and access control issues. The authors conclude the chapter with discussions of upcoming security issues.

The IRMA Community

Research IRM

Modeling Access Control in Healthcare Organizations

Purchase

Abstract

Related Content

IRMA Sponsors