A Risk Assessment Framework Proposal Based on Bow-Tie Analysis for Medical Image Diagnosis Sharing within Telemedicine

Abstract

The purpose of this paper is to propose a framework for cybersecurity risk management in telemedicine. The framework, which uses a bow-tie approach for medical image diagnosis sharing, allows the identification, analysis, and assessment of risks, considering the ISO/TS 13131:2014 recommendations. The bow-tie method combines fault tree analysis (FTA) and event tree analysis (ETA). The literature review supported the identification of the main causes and forms of control associated with cybersecurity risks in telemedicine. The main finding of this paper is that it is possible, through a structured model, to manage risks and avoid losses for everyone involved in the process of exchanging medical image information through telemedicine services. Through the framework, those responsible for the telemedicine services can identify potential risks in cybersecurity and act preventively, recognizing the causes even as, in a mitigating way, identifying viable controls and prioritizing investments. Despite the existence of many studies on cybersecurity, the paper provides theoretical contributions to studies on cybersecurity risks and features a new methodological approach, which incorporates both causes and consequences of the incident scenario.

Improvement of the occupational risk management process in the work safety system of the enterprise

“…The ISO 31010 standard recommends its use at all stages of risk management: identifying threats, analyzing consequences, risk probabilities, and assessing operational risks. In this sense, BOW-TIE analysis is a combination of FTA and ETA ( 62 ), and is very popular since it includes both the causes and consequences of an incident scenario ( 54 ).…”

Medical image encryption techniques: a technical survey and potential challenges

“…Any article selected as a sample for this study has to be particular to telemedicine, addressing CIA triad problems, and especially inside smart health care centers. The study was chosen for examination only if it met the inclusion criteria already written for the other thesis studies and scholarly review articles [23].…”

“…To aid in the analysis, a hard copy was printed. The content of all of these data sources was then scanned to determine that they were linked to medical images for telemedicine systems confidentiality, integrity, and availability difficulties and concerns [16], [23].…”

Techniques of medical image encryption taxonomy

“…It's difficult to overestimate the relevance of image security in the field of medical imaging. Several studies have been carried out to ensure the security of medical healthcare photographs [8]. Encryption is the best method for image confidentiality since it prevents data loss.…”