Premium
The MedITNet assessment framework: development and validation of a framework for improving risk management of medical IT networks
Author(s) -
MacMahon Silvana Togneri,
McCaffery Fergal,
Keenan Frank
Publication year - 2016
Publication title -
journal of software: evolution and process
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.371
H-Index - 29
eISSN - 2047-7481
pISSN - 2047-7473
DOI - 10.1002/smr.1782
Subject(s) - computer science , risk analysis (engineering) , process (computing) , risk management , health care , risk assessment , process management , computer security , medicine , engineering , management , economics , economic growth , operating system
The use of networked medical devices can provide a number of benefits such as improved patient safety, a reduction in adverse events and reduced costs of care. Today, medical devices are increasingly designed for incorporation into a hospital's general IT network, which allows devices to exchange critical information. However, connecting devices in this way can introduce risks potentially negating the benefits to patients. While the IEC 80001‐1 standard has been developed to aid Healthcare Delivery Organisations (HDOs) in addressing these risks, HDOs often struggle to understand and implement the requirements. The MedITNet framework has been developed to allow HDOs to assess the capability of their risk management processes against the requirements of IEC 80001‐1. MedITNet provides a flexible assessment framework enabling HDOs to gain a greater understanding of the requirements of the standard and to improve risk management processes by determining their current state and highlighting areas for improvement. This paper examines the challenges faced by HDOs in the risk management of medical IT networks and briefly explains the components of the MedITNet framework and how the framework addresses these challenges. The use of Action Design Research (ADR) in the development and validation of MedITNet is also discussed focusing on a pilot implementation of the assessment method and expert review of the overall framework. The changes to the framework and its components as a result of the validation process are also discussed. Copyright © 2016 John Wiley & Sons, Ltd.