A holistic perspective on models for medical information security
Patricia A H Williams · Research Online (Edith Cowan University) · 2007
There are many models of security both conceptual and technically 'specific. These models can be categorized by either their protection objective or by the process they follow. In recent years there bas been a wider acceptance that information systems need a more holistic approach. However, these holistic models lack the ability to be straightforwardly transferable into specific context in enough detail to be easily adopted into, the technical environment. Subsequently, models for medical security have been developed but these models suffer from being too technically based for adoption into a nontechnical environment. Whilst security models for information exchange require this level of technicality, it makes them unsuitable for use in an overall information systems context. Thus, risk assessment has been used extensively in research solutions for medical information security. These' models are discussed to highlight that no one model is at a sufficiently low level of sophistication to be integrated into general medical practice workflow. Consequently, a new holistic perspective of information security is required to be relevant in the general medical practice environment.