Skip to main content
Article
Human and organizational factors of healthcare data breaches: The swiss cheese model of data breach causation and prevention
International Journal of Healthcare Information Systems and Informatics
  • Faouzi Kamoun, Zayed University
  • Mathew Nicho, University of Dubai
Document Type
Article
Publication Date
1-1-2014
Abstract

Copyright © 2014, IGI Global. Copying or distributing in print or electronic forms without written permission of IGI Global is prohibited. Over the past few years, concerns related to healthcare data privacy have been mounting since healthcare information has become more digitized, distributed and mobile. However, very little is known about the root cause of data breach incidents; making it difficult for healthcare organizations to establish proper security controls and defenses. Through a systematic review and synthesis of data breaches literature, and using databases of earlier reported healthcare data breaches, the authors re-examine and analyze the causal factors behind healthcare data breaches. The authors then use the Swiss Cheese Model (SCM) to shed light on the technical, organizational and human factors of these breaches. The author's research suggests that incorporating the SCM concepts into the healthcare security policies and procedures can assist healthcare providers in assessing the vulnerabilities and risks associated with the maintenance and transmission of protected health information.

Publisher
IGI Global
Disciplines
Keywords
  • Computer security,
  • Data breach,
  • Data protection,
  • Electronic health record,
  • Patient data privacy
Scopus ID
84928037595
Indexed in Scopus
Yes
Open Access
Yes
Open Access Type
Green: A manuscript of this publication is openly available in a repository
https://ideas.repec.org/a/igg/jhisi0/v9y2014i1p42-60.html
Citation Information
Faouzi Kamoun and Mathew Nicho. "Human and organizational factors of healthcare data breaches: The swiss cheese model of data breach causation and prevention" International Journal of Healthcare Information Systems and Informatics Vol. 9 Iss. 1 (2014) p. 42 - 60 ISSN: <a href="https://v2.sherpa.ac.uk/id/publication/issn/1555-3396" target="_blank">1555-3396</a>
Available at: http://works.bepress.com/mathew-nicho/13/