Guidelines on IT Security Risk Analysis for Health Care IT and Security Personnel
Davey J., King S. · Studies in health technology and informatics · 1996
The resources required to carry out a detailed risk analysis can be very significant both in terms of skilled manpower and elapsed time. Competing demands for these resources in health care often make it difficult to justify such an investment. Experience of conducting a number of detailed risk analysis studies in various health care establishments (HCEs) in different European countries as part of the SEISMED project, has been used to develop a specific approach to risk analysis which is simple to use and produces speedy results. Recommendations on security measures appropriate to the assessed level of risk are included.