Developing the security culture at the SEISMED Reference Centres.
The paper gives a brief summary of the SEISMED project and the particular role played by the Reference Centres. Details are given of the hardware and application systems in use in the Royal Hospitals (NHS) Trust (RHT), one of the SEISMED Reference Centres. It proposes, without verification, a definition of a Security Culture based on three criteria. These are suggested to be the "Awareness" the "Acceptance" and the "Actions" of the management and staff to improve Information Systems Security throughout the RHT. The way that "Awareness" was increased is shown by the specific initiatives commenced as a result of a CRAMM Risk Analysis and the management and staff training programmes. The specific initiatives mentioned include, an Information Systems Security Policy, a contingency and disaster recovery plan, improvements in the physical protection of equipment and changes to the method of access control. The "Acceptance" by the staff of these measures is considered and the success or failure of "Developing A Security Culture" examined. The role of SEISMED in this process is assessed.
Fowler
J
J
Royal Hospital NHS Trust, Royal London Hospital, London, UK.
D016494:Computer Security; D005062:European Union; D017408:Guidelines as Topic; D006751:Hospital Information Systems / Q000458:organization & administration*; D006779:Hospitals, Public; D006801:Humans; D015279:Organizational Culture; D010564:Personnel, Hospital / Q000193:education* / Q000523:psychology; D012308:Risk Management; D000078329:Workforce