Managing information security in healthcare
Smart city consists of: waste management, smart energy, education, smart communications, smart transportation, traffic management, smart parking, smart streetlights and smart healthcare. All of these areas require management of information safety. Here, the topic is management of information safety...
Saved in:
| Main Author: | |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Pro Universitaria
2020-06-01
|
| Series: | Smart Cities and Regional Development Journal |
| Subjects: | |
| Online Access: | https://scrd.eu/index.php/scrd/article/view/72 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1850252285131620352 |
|---|---|
| author | Velibor BOŽIĆ |
| author_facet | Velibor BOŽIĆ |
| author_sort | Velibor BOŽIĆ |
| collection | DOAJ |
| description |
Smart city consists of: waste management, smart energy, education, smart communications, smart transportation, traffic management, smart parking, smart streetlights and smart healthcare. All of these areas require management of information safety. Here, the topic is management of information safety in healthcare. The objective is to show the new approach to management of information safety, which involves all employees in this process. Whether manufacturing or service, public or private, organizations increasingly depend on information and communication technology (ICT). ICT presents in such extent that its users are not even aware of its influence. It is a usual part of any organization. However, the dependence on ICT holds a potential hazard for organization’s performance. Some issues about the ICT safety should be addressed in every organization. First, does the management of an organization is aware of the potential risks and problems in the ICT area, such as potential ICT unavailability (risk culture) or accidental damage? Is there a systematic approach to threat identification, vulnerability exploration, and evaluation of the impact of realized threats on the business? Is an organization aware of the value of ICT, which should be treated in the organization as any other asset influencing business efficiency and effectiveness? Preventive and corrective actions (system of controls) are warranted for mitigating the risk of destruction or abuse of ICT. In this paper, we discuss these questions and suggest possible solutions. There are many works about the topic but these are stressed only one segment in management of information safety. We used case study, observation and structure analysis in our exploration. The results will be presented here. The results will be useful for everybody who is worried about information security in organizations. Value of this paper is showing the need of multidisciplinary approach in management of information safety.
|
| format | Article |
| id | doaj-art-724b951371d443e69211c04e57e3bfa6 |
| institution | OA Journals |
| issn | 2537-3803 |
| language | English |
| publishDate | 2020-06-01 |
| publisher | Pro Universitaria |
| record_format | Article |
| series | Smart Cities and Regional Development Journal |
| spelling | doaj-art-724b951371d443e69211c04e57e3bfa62025-08-20T01:57:40ZengPro UniversitariaSmart Cities and Regional Development Journal2537-38032020-06-014210.25019/scrd.v4i2.72Managing information security in healthcareVelibor BOŽIĆ0General Hospital Koprivnica, Croatia Smart city consists of: waste management, smart energy, education, smart communications, smart transportation, traffic management, smart parking, smart streetlights and smart healthcare. All of these areas require management of information safety. Here, the topic is management of information safety in healthcare. The objective is to show the new approach to management of information safety, which involves all employees in this process. Whether manufacturing or service, public or private, organizations increasingly depend on information and communication technology (ICT). ICT presents in such extent that its users are not even aware of its influence. It is a usual part of any organization. However, the dependence on ICT holds a potential hazard for organization’s performance. Some issues about the ICT safety should be addressed in every organization. First, does the management of an organization is aware of the potential risks and problems in the ICT area, such as potential ICT unavailability (risk culture) or accidental damage? Is there a systematic approach to threat identification, vulnerability exploration, and evaluation of the impact of realized threats on the business? Is an organization aware of the value of ICT, which should be treated in the organization as any other asset influencing business efficiency and effectiveness? Preventive and corrective actions (system of controls) are warranted for mitigating the risk of destruction or abuse of ICT. In this paper, we discuss these questions and suggest possible solutions. There are many works about the topic but these are stressed only one segment in management of information safety. We used case study, observation and structure analysis in our exploration. The results will be presented here. The results will be useful for everybody who is worried about information security in organizations. Value of this paper is showing the need of multidisciplinary approach in management of information safety. https://scrd.eu/index.php/scrd/article/view/72healthcare sectorinformation systemsriskrisk managementCOBITISO 27799 |
| spellingShingle | Velibor BOŽIĆ Managing information security in healthcare Smart Cities and Regional Development Journal healthcare sector information systems risk risk management COBIT ISO 27799 |
| title | Managing information security in healthcare |
| title_full | Managing information security in healthcare |
| title_fullStr | Managing information security in healthcare |
| title_full_unstemmed | Managing information security in healthcare |
| title_short | Managing information security in healthcare |
| title_sort | managing information security in healthcare |
| topic | healthcare sector information systems risk risk management COBIT ISO 27799 |
| url | https://scrd.eu/index.php/scrd/article/view/72 |
| work_keys_str_mv | AT veliborboa1⁄2ia managinginformationsecurityinhealthcare |