title: An information security management strategy for healthcare institutions.
abstract: This paper starts with a criticism of existing security management practices and argues why they are not adequate for health care enterprises and institutions. It further outlines a sociotechnical perspective on information security, from which an alternative approach and strategy for information security management practice is suggested.
authors.affiliation: Norwegian Centre for Medical Informatics (KITH), Medisinsk Teknisk Senter, 7005 Trondheim, Norway.
authors.forename: T O
authors.initials: TO
authors.lastname: Grøtan
authors.forename: K R
authors.initials: KR
authors.lastname: Iversen
mesh_terms: D016494:Computer Security / Q000592:standards; D003219:Confidentiality; D006751:Hospital Information Systems / Q000458:organization & administration; D007318:Inservice Training; D009664:Norway; D017749:Total Quality Management