title: Health information system access control redesign - rationale and method.
abstract: This paper addresses the question of why a health service system might find it necessary to re-engineer the access control model that mediates the interaction of clinicians with health information systems. Factors that lead to increasingly complexity of the access control models are delineated, and consequences of that complexity are identified. Strategies are presented to address these factors, and a stepwise procedure is suggested to structure the access control model re-engineering process.
authors.affiliation: Vancouver Island Health Authority, Victoria, British Columbia, Canada.
authors.forename: Kenneth A
authors.initials: KA
authors.lastname: Moselle
mesh_terms: D022126:Access to Information; D003219:Confidentiality; D057286:Electronic Health Records / Q000458:organization & administration*; D008962:Models, Theoretical; D014584:User-Computer Interface