When security prevents efficient work flow, users don't follow security rules
Henriette Mabeck · 2011
This case study exemplifies how end users disregard security rules in it systems. If security rules prevent efficient work flow, end users invent local work around practises that bypasses security rules build into it systems. Results from this study are based on 200 hours of observa- tions and 28 semi structured interviews. The study shows that physicians and nurses don't follow rules or act as intended in security matters, when security obstruct or delay patient treatment. Not even built-in security measures, as password and log on, force users to act as in- tended. They are loyal to the core value - patient treatment. The study shows that there is a gap between theoretical secu- rity solutions, security solutions adapted from traditionally office work situations and medical practise. This calls for so- cio technical studies of medical practise, where users are ob- served in real life setting.