Modeling risk in distributed healthcare information systems.
This paper presents a modeling approach for performing a risk analysis study of networked healthcare information systems. The proposed method is based on CRAMM for studying the assets, threats and vulnerabilities of the distributed information system, and models their interrelationships using Bayesian networks. The most critical events are identified and prioritized, based on "what - if" studies of system operation. The proposed risk analysis framework has been applied to a healthcare information network operating in the North Aegean Region in Greece.
Maglogiannis
Ilias
I
University of Aegean, Department of Information & Communication Systems Engineering, Samos, Greece. imaglo@aegean.gr
Zafiropoulos
Elias
E
D001499:Bayes Theorem; D003195:Computer Communication Networks; D016494:Computer Security; D003201:Computers; D006115:Greece; D006751:Hospital Information Systems; D006801:Humans; D007256:Information Systems; D016347:Medical Records Systems, Computerized; D008962:Models, Theoretical; D012306:Risk; D018570:Risk Assessment; D012984:Software; D018511:Systems Integration; D017216:Telemedicine