title: Modeling risk in distributed healthcare information systems.
abstract: This paper presents a modeling approach for performing a risk analysis study of networked healthcare information systems. The proposed method is based on CRAMM for studying the assets, threats and vulnerabilities of the distributed information system, and models their interrelationships using Bayesian networks. The most critical events are identified and prioritized, based on "what - if" studies of system operation. The proposed risk analysis framework has been applied to a healthcare information network operating in the North Aegean Region in Greece.
authors.affiliation: University of Aegean, Department of Information & Communication Systems Engineering, Samos, Greece. imaglo@aegean.gr
authors.forename: Ilias
authors.initials: I
authors.lastname: Maglogiannis
authors.forename: Elias
authors.initials: E
authors.lastname: Zafiropoulos
mesh_terms: D001499:Bayes Theorem; D003195:Computer Communication Networks; D016494:Computer Security; D003201:Computers; D006115:Greece; D006751:Hospital Information Systems; D006801:Humans; D007256:Information Systems; D016347:Medical Records Systems, Computerized; D008962:Models, Theoretical; D012306:Risk; D018570:Risk Assessment; D012984:Software; D018511:Systems Integration; D017216:Telemedicine