Impact of Security Culture on Security Compliance in Healthcare in the USA
CYBERSECURITY AND HIPAA COMPLIANCE IN US HEALTHCARE - A NATIONAL DOCTORAL STUDY. Cited in the reference materials for the HealthCare Information Security and Privacy Practitioner (HCISPP) certification by ISC2.
"... not only is the research ... in a critical area to all of us and to our nation. It is one of the finest studies I have read in many, many years." - Dr. "Vic" Maconachy, VP for Academic Affairs and Chief Academic Officer, Capitol Technology University
"... presents some very powerful challenges to enhance HIPAA compliance and information security in general. I also highly recommend that those interested in HIPAA compliance read the review of literature. Great Work." - Chip Council, PhD, CGEIT, CISA, CISM, Senior Manager, Information Security, Shriners Hospital for Children
"...a comprehensive and well-written scholarly work on a topic that is now very relevant to those of us that are in the healthcare space ... fully addressing the "people" factor that is so important to information security adoption ... this book is a timely and eye opening source of valuable information that everyone in healthcare should read." - James Brady, PhD, FHIMSS, CIO - Kaiser Permanente
This work should benefit all doctoral students interested in seeing what a final doctoral dissertation should look like. Students preparing to submit their proposals for IRB review will find Chapters 1, 2 and 3 and the appendices helpful in preparing their IRB application packet. Students using survey research methods will find the discussions on determining sample size and selecting non-random samples of elusive populations helpful. Chapter 2 of this book is an example of what a good literature review in any doctoral dissertation needs to look like. It is also one of the most helpful discussions on the HIPAA security and privacy law and the surrounding recent literature. This work also contains examples of good free and open source tools for conducting surveys as well and statistical analysis.
Research shows that during the past 5 years 80-90% of security breaches in healthcare has been due to people inside the organization. Security culture and information security governance is the key to addressing this problem. Cited in the reference materials for the HealthCare Information Security and Privacy Practitioner (HCISPP) certification by ISC2, this work shares the results of a national study of security compliance in US healthcare organizations conducted in 2013. The study identifies weaknesses in NIST 800-66 and provides solutions. Drawing upon the author's experience in implementing enterprise information security and privacy, the work provides an analysis of important scholarly literature surrounding human factors and insider threats with a particular emphasis on healthcare in the United States of America. The work is expected to benefit anyone implementing or studying enterprise information security and privacy.
