Challenges of information security incident learning: an industrial case study in a Chinese healthcare organization

He, Y. and Johnson, C. (2017) Challenges of information security incident learning: an industrial case study in a Chinese healthcare organization. Informatics for Health and Social Care, 42(4), pp. 393-408. (doi:10.1080/17538157.2016.1255629) (PMID:28068150)

134944.pdf - Accepted Version



Security incidents can have negative impacts on healthcare organizations, and the security of medical records has become a primary concern of the public. However, previous studies showed that organizations had not effectively learned lessons from security incidents. Incident learning as an essential activity in the “follow-up” phase of security incident response lifecycle has long been addressed but not given enough attention. This paper conducted a case study in a healthcare organization in China to explore their current obstacles in the practice of incident learning. We interviewed both IT professionals and healthcare professionals. The results showed that the organization did not have a structured way to gather and redistribute incident knowledge. Incident response was ineffective in cycling incident knowledge back to inform security management. Incident reporting to multiple stakeholders faced a great challenge. In response to this case study, we suggest the security assurance modeling framework to address those obstacles.

Item Type:Articles
Additional Information:The authors would like to thank the Scottish Informatics and Computer Science Alliance (SICSA) for funding this research.
Glasgow Author(s) Enlighten ID:Johnson, Professor Chris
Authors: He, Y., and Johnson, C.
College/School:College of Science and Engineering > School of Computing Science
Journal Name:Informatics for Health and Social Care
Publisher:Taylor and Francis
ISSN (Online):1753-8165
Published Online:09 January 2017
Copyright Holders:Copyright © 2017 Taylor and Francis
First Published:First published in Informatics for Health and Social Care 42(4):393-408
Publisher Policy:Reproduced in accordance with the publisher copyright policy

University Staff: Request a correction | Enlighten Editors: Update this record