Framework for Healthcare Security Practice Analysis, Modeling and Incentivization

Healthcare professionals are often the weakest link in the security chain, which is contributing to data breaches in the healthcare sector. A number of reasons account for this. Technological countermeasures for cyber defenses have been heightened and the adversaries tend to exploit easy entry points. Besides, healthcare staffs are usually occupied by their core duty of healthcare provison with little experience in information security.With a Design Science Approach (DSA), observational measures for effective profiling of healthcare staffs were developed. Regulations and security standards such as the Code of Conduct, General Data Protection Regulation (GDPR) of European Union (EU), ISO 7799, and other Norwegian Acts and regulations for personal data protection, were reviewed for the observational measures. A comprehensive Healthcare Security Practice Analysis, Modeling and Incentivization (HSPAMI) framework was proposed for analyzing healthcare staffs' security practices in a comprehensive way.