Assignment 4: Draft Introduction

MASTER OF SCIENCE IN MANAGEMENT AND SYSTEMS

Research Process and Methodology

MASY GC- 1260

MEMORANDUM

TO: Dr. Andres Fortino

FROM: Chen Chen

DATE: 10/06/2020

RE: Assignment 3 – Fifteen to Twenty Reference

Annotated Bibliography

Research Question: Which information Security techniques are most effective for healthcare facilities to adopt to ensure the security of Covid19 electronic health records?

1. Alberts, C. J., & Dorofee, A. J. (2003). Managing information security risks: the OCTAVE approach. Addison-Wesley Professional.

Approach of the paper is a self-directed security evaluation that is aimed at providing solution to the practitioners. Literature on managing information security risks, which includes self-directed evaluation methods and assessing risks.

The book highlights a specific approach called ‘OCTAVE’ that identifies and rank information assets, weight assigned to those assets, and vulnerabilities associated in terms of practice and technology.

2. Appari, A., & Johnson, M. E. (2010). Information security and privacy in healthcare: current state of research. International journal of Internet and enterprise management, 6(4), 279-314.

Authors of the paper attempts to understand the various processes of health care security, which includes exchange of valuable information between patient and provider, coupled with provider and payer.

The paper uses holistic approach of understanding the various processes associated with ensuring the data security. Paper adds value to the current study by understanding the various processes, along with an attempt of providing valuable knowledge to information systems community, which will eventually increase their technical capacity.

3. Asare-Frempong, J., & Jayabalan, M. (2017). Exploring the Impact of Big Data in Healthcare and Techniques in Preserving Patients' Privacy. IJCSNS, 17(8), 143.

Jayabalan and Asare-Frempong (2017) explores impact of the Big Data technology in healthcare for preservation of Patients’ privacy. Big Data provides ways in which national and global data can be utilized, and includes issues concerning cyber security.

The paper on Big Data enhances research topic comprehensibility by understanding the broader picture in which the information of patient can be secured globally from breach.

4. Ayala, L. (2016). Cybersecurity for hospitals and healthcare facilities. Berkeley, CA.

Content of the book is divided into eight chapters that addresses a single issue distinctively from one another, but overall contributing to the detailed understanding of research problem. Themes in the book includes hacking, technological devices, insider threats, detection, and prevention of different sort of cyber-attacks.

Ayala (2016) guide to understand cybersecurity for hospitals and healthcare facilities is a comprehensive guide on the detection and preventions aspect.

5. Cline, G. B., & Luiz, J. M. (2013). Information technology systems in public sector health facilities in developing countries: the case of South Africa. BMC medical informatics and decision making, 13(1), 13.

Authors of the paper illustrates the different issues faced by a healthcare facility in South Africa, which includes lack of resources and other countless challenges. It provides a detailed understanding of the available challenges to electronic healthcare data in the settings of a developing country.

The paper contributes to the literature due to its elaboration on issues the public sector health facilitates in less developed countries, which manages to assist the current research understanding in the relative severity of the security threats in comparative manner.

6. Fagherazzi, G., Goetzinger, C., Rashid, M. A., Aguayo, G. A., & Huiart, L. (2020). Digital health strategies to fight COVID-19 worldwide: challenges, recommendations, and a call for papers. Journal of Medical Internet Research, 22(6), e19284.

The viewpoint paper provides ways in which digital health strategies can be utilized effectively to overcome challenges within the context of COVID-19 pandemic. It provides far forward to healthcare service provider in terms of designing a coordinated mechanism of response. Challenges and ethical hurdles for successful health care model requires emphasis on emergency and primary care.

The paper is useful in elaboration the challenges faced by a successful healthcare model, and ways in which they can further strengthened. Undoubtedly, assessing the challenges can provide the context framework within the healthcare security management require alteration.

7. Fahey, R. A., & Hino, A. (2020). COVID-19, digital privacy, and the social limits on data-focused public health responses. International Journal of Information Management, 102181.

Fahey & Hino (2020) illustrates the need of data privacy within pandemic situations to reduce pressure on healthcare service providers, both public and private. A distinction between ‘data-first’ and ‘privacy-first’ philosophical approaches in actions worldwide require investigation for informed security system development, globally.

There is growing concern for the ‘privacy-first’ philosophical approaches because they limit the freedom of common citizens to undertake any research due to its unfair use by media and other information channels. Unlike researchers, medic creates a panic situation that directly threatens the efficacy of the service providers. Additionally, increased pressure on government authorities reduces government-healthcare organization coordination.

8. Jain, A. K., Ross, A., & Pankanti, S. (2006). Biometrics: a tool for information security. IEEE transactions on information forensics and security, 1(2), 125-143.

An increase in the need for determination of individual’s identity paves way for biometric technology that identifies an individual based on its physical features. Biometric technology is one of the few much-needed technologies within framework of wider security system.

The article is fifteen years old but highlights the different strengths and weaknesses of biometric technology in reducing risks to information system within healthcare settings. It is a general book to understand the various benefits and limitations of biometric technology, which is a component of overall security system for healthcare organizations.

9. Krausz, M., Westenberg, J. N., Vigo, D., Spence, R. T., & Ramsey, D. (2020). Emergency Response to COVID-19 in Canada: Platform Development and Implementation for eHealth in Crisis Management. JMIR Public Health and Surveillance, 6(2), e18995.

The paper explains the method in which Canada’s healthcare sector responded to COVID-19, and it has useful lessons for comparison of US healthcare sector performance with the developed world. It elaborated the functional and structural problems of Canada’s healthcare sector.

The paper provides issues of healthcare sector performance in pandemic situation with the case study of Canada, which can add value to the existing analysis of securing the information of COVID-19.

10. Kruse, C. S., Smith, B., Vanderlinden, H., & Nealand, A. (2017). Security techniques for the electronic health records. Journal of medical systems, 41(8), 127.

This paper utilizes research methodology of literature review, and manages to seek and analyze research papers from 25 journals that assess the available security techniques for ensuring security of health records.

The peered review journal reflects systematic approach to understanding the available security techniques in the market. List of available security approaches, coupled with categorization with respect of administrative, technical, and physical themes.

11. Lallie, H. S., Shepherd, L. A., Nurse, J. R., Erola, A., Epiphaniou, G., Maple, C., & Bellekens, X. (2020). Cyber security in the age of covid-19: a timeline and analysis of cyber-crime and cyber-attacks during the pandemic. arXiv preprint arXiv:2006.11929.

A Critical review of the cyber-attacks during COVID-19 pandemic allows researchers and practitioners from Information Technology and Healthcare science to understand their characteristics and features. Life altering nature of COVID-19 pandemic places emphasis on the cybersecurity of healthcare data for efficiency in providing healthcare services.

An important aspect of the study pertains to the existing list of global attacks through cyber technology, and can assist the study further in utilizing these incidents as case studies for creating an efficient and effective healthcare system. The frequency of attacks reached 3-4 attacks per day since the outbreak of pandemic, which provides empirical analysis of the way cyber attackers strategize campaigns for leveraging from the government announcements and key events.

12. Narayana Samy, G., Ahmad, R., & Ismail, Z. (2010). Security threats categories in healthcare information systems. Health informatics journal, 16(3), 201-209.

Narayana, Ahmad and Ismail (2010) explains the categorization of security threats within healthcare information system, with the case study of government-supported hospitals in Malaysia.

This paper is useful in terms of its cases study approach to the problems at practice. It will allow the current research to further, strengthen its practicality base.

13. National Research Council. (1997). For the record: protecting electronic health information. National Academies Press.

Chapter on ‘privacy and security concerns’ provide five technological security tools and their respective essential components. The five key functions are compensability and control, availability, controlling access, accountability, and perimeter identification.

The publication of this book is within 25 years but examines the theoretical foundations of e-information security for creation of a healthcare security system. Its relevance to the research topic is due to investigation concerning the technical side of available methods.

14. Pirbhulal, S., Samuel, O. W., Wu, W., Sangaiah, A. K., & Li, G. (2019). A joint resource-aware and medical data security framework for wearable healthcare systems. Future Generation Computer Systems, 95, 382-391.

Paper illustrates the building blocks of modern healthcare by exploring the internet of Medical Things (IoMTs) critical concepts of resource constraints, data security, and privacy. Central emphasis of the paper on networking environment that channelizes the flow of information form one party to another.

This paper is detailed analysis of the information flow channels, and the associated constraints for resolving the problem, coupled with security and privacy issue associated.

15. Shohet, I. M., & Lavy, S. (2004). Healthcare facilities management: state of the art review. Facilities.

Sophet (2004) provides detailed analysis of the various domains in healthcare facility management, and it is primarily due to the rise in national demand form public office holders to ensure security within healthcare facility management (FM).

The paper is useful contribution to the current study as it explains the increased emphasize on demand for healthcare facilities management (FM), and illustrates in detail the domains of central theme of health care FM model, performance management, and maintenance management.

16. Sinha, P. K., Sunder, G., Bendale, P., Mantri, M., & Dande, A. (2012). Electronic health record: standards, coding systems, frameworks, and infrastructures. John Wiley & Sons.

The first three sections of standard framework, coding system, and EHR standards provides literature review of the available dimensions of ‘information security’ approaches and its implementation with the intention of securing healthcare data breach.

The book represents a compressive overview of the information technology implementation into security of electronic health record. Book devises the approach of separately studying standards, coding system, frameworks, and infrastructure.

17. Spence, N., & Paul III, D. P. (2018). Ransomware in Healthcare Facilities: A Harbinger of the Future? Perspectives in Health Information Management, 1-22.

Ransomware in healthcare facilitates are on rise, and the healthcare industry want to safeguard its interest in terms of profitability and operations.

The paper illustrates ways in which ransomware can increase cyber security, which is similar in nature to increasing information pertaining to pandemics like COVID-19. Productivity of healthcare provider coupled with organizational sustainability are at the core of both scenarios.

18. Vithanwattana, N., Mapp, G., & George, C. (2017). Developing a comprehensive information security framework for mHealth: a detailed analysis. Journal of Reliable Intelligent Environments, 3(1), 21-39.

Field of mHealth is a cross-disciplinary subject, and the paper illustrates to highlight the various issues associated with information framework. A detailed analysis includes various approaches that are necessary for achieving efficiency in healthcare setting, that is, patient-focused healthcare system.

The paper attempts to approach the problem with a comprehensive lens on mHelath, which is a broader field and assists in analyzing various domains of security within mHelath efficient framework.

References

Alberts, C. J., & Dorofee, A. J. (2003). Managing information security risks: the OCTAVE approach. Addison-Wesley Professional.

Appari, A., & Johnson, M. E. (2010). Information security and privacy in healthcare: current state of research. International journal of Internet and enterprise management, 6(4), 279-314.

Asare-Frempong, J., & Jayabalan, M. (2017). Exploring the Impact of Big Data in Healthcare and Techniques in Preserving Patients' Privacy. IJCSNS, 17(8), 143.

Ayala, L. (2016). Cybersecurity for hospitals and healthcare facilities. Berkeley, CA.

Cline, G. B., & Luiz, J. M. (2013). Information technology systems in public sector health facilities in developing countries: the case of South Africa. BMC medical informatics and decision making, 13(1), 13.

Fagherazzi, G., Goetzinger, C., Rashid, M. A., Aguayo, G. A., & Huiart, L. (2020). Digital health strategies to fight COVID-19 worldwide: challenges, recommendations, and a call for papers. Journal of Medical Internet Research, 22(6), e19284.

Fahey, R. A., & Hino, A. (2020). COVID-19, digital privacy, and the social limits on data-focused public health responses. International Journal of Information Management, 102181.

Jain, A. K., Ross, A., & Pankanti, S. (2006). Biometrics: a tool for information security. IEEE transactions on information forensics and security, 1(2), 125-143.

Krausz, M., Westenberg, J. N., Vigo, D., Spence, R. T., & Ramsey, D. (2020). Emergency Response to COVID-19 in Canada: Platform Development and Implementation for eHealth in Crisis Management. JMIR Public Health and Surveillance, 6(2), e18995.

Kruse, C. S., Smith, B., Vanderlinden, H., & Nealand, A. (2017). Security techniques for the electronic health records. Journal of medical systems, 41(8), 127.

Lallie, H. S., Shepherd, L. A., Nurse, J. R., Erola, A., Epiphaniou, G., Maple, C., & Bellekens, X. (2020). Cyber security in the age of covid-19: a timeline and analysis of cyber-crime and cyber-attacks during the pandemic. arXiv preprint arXiv:2006.11929.

Narayana Samy, G., Ahmad, R., & Ismail, Z. (2010). Security threats categories in healthcare information systems. Health informatics journal, 16(3), 201-209.

National Research Council. (1997). For the record: protecting electronic health information. National Academies Press.

Pirbhulal, S., Samuel, O. W., Wu, W., Sangaiah, A. K., & Li, G. (2019). A joint resource-aware and medical data security framework for wearable healthcare systems. Future Generation Computer Systems, 95, 382-391.

Shohet, I. M., & Lavy, S. (2004). Healthcare facilities management: state of the art review. Facilities.

Sinha, P. K., Sunder, G., Bendale, P., Mantri, M., & Dande, A. (2012). Electronic health record: standards, coding systems, frameworks, and infrastructures. John Wiley & Sons.

Spence, N., & Paul III, D. P. (2018). Ransomware in Healthcare Facilities: A Harbinger of the Future?. Perspectives in Health Information Management, 1-22.

Vithanwattana, N., Mapp, G., & George, C. (2017). Developing a comprehensive information security framework for mHealth: a detailed analysis. Journal of Reliable Intelligent Environments, 3(1), 21-39.