Development of an E-Healthcare Information Security Risk Assessment Method

  • Authors:

  • June Wei;Binshan Lin;Meiga Loho-Noya

  • Affiliations:

  • College of Business, University of West Florida, Pensacola, FL, USA;Department of Management/Marketing, College of Business Administration, Louisiana State University in Shreveport, Shreveport, LA, USA;College of Business, University of West Florida, Pensacola, FL, USA

  • Venue:
  • Journal of Database Management
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper developed a method to assess information security risks in e-healthcare. Specifically, it first developed a static E-Healthcare Information Security Risk EHISR model to present thirty-three security risk factors by identifying information security threats and their sources in e-healthcare. Second, a dynamic E-Healthcare Information Flow EHIF model was developed to logically link these information risk factors in the EHISR model. Pattern analysis showed that information security risks could be classified into two levels, and versatility analysis showed that the overall security risks for eight information flows were close with a range from 55% to 86%. Third, one quantifiable approach based on a relative-weighted assessment model was developed to demonstrate how to assess the information security risks in e-healthcare. This quantitative security risk measurement establishes a reference point for assessing e-healthcare security risks and assists managers in selecting a reliable information flow infrastructure with a lower security risk level.