| Popis: |
Information security in the health information system has been technology-centric and no strategy has been put forward to meet the demands of the rapid adoption of e-Health in the health industry. The implementation of security requires a good understanding of the stake holders involved and requires the technical aspect of clinical information security, including security requirements, access control and disclosure control. However, since technology-centric security is prone to failure, a stringent strategic approach is quintessential. This chapter discusses the ways to safeguard medical information assets from the strategy point of view. This study shows that most of the existing clinical information security literature and practice has been focused on tactical prevention at a technical level. This understanding of the current status of clinical information security not only suggests the need for a shift from the technical approach to the strategic approach but also raises the necessity for the employment of multiple strategies working in a harmonised way. |
