A risk management model for securing virtual healthcare communities

Abstract

Virtual healthcare communities aim to bring together healthcare professionals and patients, improve the quality of healthcare services and assist healthcare professionals and researchers in their everyday activities. In a secure and reliable environment, patients share their medical data with doctors, expect confidentiality and demand reliable medical consultation. Apart from a concrete policy framework, several ethical, legal and technical issues must be considered in order to build a trustful community. This research emphasises on security issues, which can arise inside a virtual healthcare community and relate to the communication and storage of data. It capitalises on a standardised risk management methodology and a prototype architecture for healthcare community portals and justifies a security model that allows the identification, estimation and evaluation of potential security risks for the community. A hypothetical virtual healthcare community is employed in order to portray security risks and the solutions that the security model provides.

Cyber Risk in Health Facilities: A Systematic Literature Review

“…to re-examine and analyze the causal factors behind healthcare data breaches, using the Swiss Cheese Model to shed light on the technical, organizational, and human factors of these breaches [31] 1.2 to include the effects of medical identity fraud on patient compliance, brand, and profitability [32] 1. to not only develop policies and procedures to prevent, detect, contain, and correct security violations, but should make sure that such policies and procedures are implemented in their everyday operations [20] 1.1 to address the problem of improper use of health data and introduce a methodology that protects medical records from unauthorized access, leaving the patient the choice to decide which people are authorized to use his data [34] 1.2 to emphasis on security issues, which can arise inside a virtual healthcare community and relate to the communication and storage of data [21] 1.1…”