title: Security policy development for Healthcare Information Systems.
abstract: In this paper the issue of security policy development for health information systems is addressed. Security policy development involves the definition of the policy content, the analysis of the social, organisational, and technical contexts, as well as the organisation of the policy development process. We present the structure of security policies, analyse the characteristics of the HIS context, and analyse the different categories of methodologies, which can be used towards this end.
authors.affiliation: Dept. of Informatics, Athens University of Economics & Business, Athens, Greece. dgrit@aueb.gr
authors.forename: Dimitris
authors.initials: D
authors.lastname: Gritzalis
authors.forename: Spyros
authors.initials: S
authors.lastname: Kokolakis
mesh_terms: D016494:Computer Security / Q000331:legislation & jurisprudence*; D006115:Greece; D017408:Guidelines as Topic; D007256:Information Systems / Q000331:legislation & jurisprudence / Q000458:organization & administration*; D008490:Medical Informatics; D016134:Organizational Policy; D011050:Policy Making