Draft of Chapter Two

Concentration

Information Systems Security

Topic

Cyber- Attacks on Healthcare and Their Mitigation Techniques.

Proposed Topic The severity of attacks on healthcare industries is rising, substantially exposing information security, effective patient treatment, financial obligations, and loss prevention. The value of healthcare data, such EHRs, on the dark web is very high, considerably raising the organization's risk. As technology develops, there are more entry points into networks, and vulnerabilities are found more frequently. Cybercriminals like to attack the healthcare sector. It is because healthcare data has a significant commercial value. Healthcare data, like the EHR, has increased in value since it combines personal and financial information into a single digital document. EHR is a tool that cybercriminals can use for extortion and false billing. Awareness of the latest cyber threats and their mitigation strategies must require for every organization's employee due to a lack of awareness of threats and delay in triggering them, leading to considerable losses to organizations and individuals.

Connection

Connection to the topic Specializing in information technology (IT), Providing security to the application, and adopting new technologies are significant roles. Researching and learning about the risks and advantages of the new technologies is my responsibility before adopting them. Organizational success depends on the availability of secure networks and the safekeeping of sensitive data, making healthcare cybersecurity a top priority. Electronic health record (EHR) systems, e-prescribing systems, start practicing organizational support structures, clinical decision support systems, radiation oncology information systems, and CPOE (computerized physician order entry) systems are just a few examples of specialized hospital information systems used by many healthcare organizations.

Background:

Theory Model:

(Technology Acceptance Model)

Theoretical framework the technology acceptance model (TAM) is a theoretical framework with characteristics that significantly impact employee behavior intentions and usages of cyber security, such as perceived utility and perceived ease of use. With TAM, self-efficacy has been shown to affect how information systems are adopted and used. This study makes use of the theoretical framework for security awareness and training. Where to invest resources for cyber-defense can be decided by using an assessment approach for cyber risk like the FAIR model. A cyber risk assessment can assist in determining where to focus in order to protect an organization’s most vulnerable and priceless information assets by clearly prioritizing which vulnerabilities are most endangered or would result in a comparably worse loss. Gaps in the Existing Literature The current research has been essential in examining the public cloud’s security vulnerabilities and the effects of these concerns on cloud computing consumers and service providers. Because they increase both production and efficiency, teams are an indispensable component of modern enterprises. Therefore, switching around the members of a team can improve overall productivity. Businesses are compelled to develop innovations that are team-based and increase their productivity because the external environment is fraught with uncertainty.

Population

Population Targeting fifteen to twenty cyber security specialists familiar with cyber security and its uses in different IT contexts will be the focus of this research. It also included a survey of employees working in the healthcare industry to know their awareness of the latest threats and mitigation strategies and how organizations provide training to the employees to mitigate such cyber-attacks. Research Question How to enhance cyber security in healthcare to overcome cyber-attacks? One of the greatest dangers hospitals faces is cyber-security breaches. The medical industry will suffer if cyber security is not improved to prevent the theft of sensitive data. While there is no denying the seriousness of the cyber security issue, safeguards can be tightened in areas where machine learning is applied, such as the use of robust passwords to secure user data in healthcare institutions from hackers. Using questionnaires and polls, we’ll assess whether or not recent efforts to bolster cyber security have been successful. Seventy-five healthcare IT professionals were surveyed about ways to improve cyber security. Sixty-three experts believe that hackers cannot gain access to health and medical records if proper security measures are in place, whereas seven experts believe that cyber security is configuration-based. If the equipment were not correctly implemented, a hacker would defeat the security. Five experts in the field of cyber security concluded that if given enough time, hackers could gain access to whatever data they desired. Orebamjo, 2022. As for the second, it involved scouring the internet and library catalogs for old documents. Using this technique, I gathered 210 data points on how to improve hospital cyber security. According to the opinions of 27 industry professionals, good cyber security would be enabled by security updates and critical programming languages, which would prevent hackers from accessing the systems. Twenty-three cyber security experts agreed that security may be bolstered; yet hackers can exploit flaws in healthcare networks from a variety of angles.

Methodology

Qualitative (Only)