Open AccessRisk management focusing on the best practices of data security systems for healthcare
Author(s) -
Fábio Martins Dias,
Mauro Luiz Martens,
Sônia Francisca Monken,
Luciano Ferreira da Silva,
Ernesto D. R. Santibañez Gonzalez
Publication year - 2021
Publication title -
international journal of innovation
Language(s) - English
Resource type - Journals
ISSN - 2318-9975
DOI - 10.5585/iji.v9i1.18246
Subject(s) - health care , context (archaeology) , best practice , computer security , relevance (law) , risk management , computer science , information security , risk analysis (engineering) , business , knowledge management , political science , paleontology , finance , law , biology
Objective of the study: Statistics shows a worrisome picture of challenges to be overcome by cybersecurity in the healthcare sector. Data evidence that the healthcare industry experiences four data breaches per week in the United States alone, making it the sector most often affected by digital security breaches. Thus, the current article aims to investigate risk management focusing on identifying requirements and best practices for healthcare data security systems.Methodology/approach: It is based on a systematic literature review. Studies on state-of-the-art data security systems were collected and interpreted through content analysis. Assertive keywords, source-selection criteria, interpretation of selected articles, and database analysis were used to form the investigated sample and to represent the broad applications of this study’s objective.Originality/Relevance: The current study contributes to define a set of minimum requirements and best practices that can be adopted to manage data security risks in the healthcare sector and medical devices.Main results: Results have pointed out that there is no fully effective way to prevent all violations by cybercriminals; however, cybersecurity must be part of management processes adopted by different organizations.Theoretical/methodological contributions: It is found that cybersecurity has a great importance for the healthcare sector, the information generated is rich in content and that cybersecurity is neglected in the sector, that is not able to deal with the reality of cyber threats in the industry 4.0 context.Social /management contributions: By the good risk management practices and the adoption of minimum security items, institutions can ensure that managers can prepare and respond efficiently to cyber risks.