title: Health information security: a case study of three selected medical centers in iran.
abstract: Health Information System (HIS) is considered a unique factor in improving the quality of health care activities and cost reduction, but today with the development of information technology and use of internet and computer networks, patients' electronic records and health information systems have become a source for hackers.
  
  
  METHODS
  This study aims at checking health information security of three selected medical centers in Iran using AHP fuzzy and TOPSIS compound model. To achieve that security measures were identified, based on the research literature and decision making matrix using experts' points of view.
  
  
  CONCLUSIONS
  Among the 27 indicators, seven indicators were selected as effective indicators and Fuzzy AHP technique was used to determine the importance of security indicators. Based on the comparisons made between the three selected medical centers to assess the security of health information, it is concluded that Chamran hospital has the most acceptable level of security and attention in three indicators of "verification and system design, user access management, access control system", Al Zahra Hospital in two indicators of "access management and network access control" and Amin Hospital in "equipment safety and system design". In terms of information security, Chamran Hospital ranked first, Al-Zahra Hospital ranked second and Al- Zahra hospital has the third place.
authors.affiliation: Department of Medical Informatics. Faculty of Health Services Management and Medical Information Sciences, Isfahan University of Medical Sciences (IUMS) , Isfahan, Iran.
authors.forename: Nafiseh
authors.initials: N
authors.lastname: Hajrahimi
authors.forename: Sayed Mehdi Hejazi
authors.initials: SM
authors.lastname: Dehaghani
authors.forename: Abbas
authors.initials: A
authors.lastname: Sheikhtaheri
keywords: Health Information Systems; Information Security; TOPSIS; fuzzy AHP