term project.pdf - (IJACSA International Journal of...

Info icon This preview shows pages 1–2. Sign up to view the full content.

View Full Document Right Arrow Icon
(IJACSA) International Journal of Advanced Computer Science and Applications, Vol. 8, No. 2, 2017 193 | P a g e A Framework for an Effective Information Security Awareness Program in Healthcare A Case Study of Computer Game in Hospital Universiti Kebangsaan Malaysia Arash Ghazvini Faculty of Information Science and Technology Universiti Kebangsaan Malaysia, 43600 UKM, Bangi Selangor, Malaysia Zarina Shukur Faculty of Information Science and Technology, Universiti Kebangsaan Malaysia, 43600 UKM, Bangi Selangor, Malaysia Abstract Electronic Health Record (EHR) is a valuable asset of every healthcare and it needs to be protected. Human errors are recognized as the major information security threats to EHR systems. Employees who interact with EHR systems should be trained about the risks and hazards related to information security. However, there are limited studies regarding the effectiveness of training programs. The aim of this paper is to propose a framework that provides guidelines for healthcare organizations to select an effective information security training delivery method. In addition, this paper proposes a guideline to develop information security content for awareness training programs. Lastly, this study attempts to implement the proposed framework in a selected healthcare for evaluation. Hence, a serious game is developed as a training method to deliver information security content for the selected healthcare. An effective training program raises employees’ awareness toward information security with a long-term impact. It helps to gradually change employees’ behavior ove r time by reducing their negligence towards secure utilization of healthcare EHR systems. Keywords awareness Training Program; Information Security; Content Development; Electronic Health Record; Human Error; Serious Game I. I NTRODUCTION There is a wide range of training delivery methods for information security awareness programs. However, research is scant regarding the effectiveness of these methods [1]. The literature shows that many information security awareness training programs have failed to produce long-term impacts on employees’ behavior [1][2][6]. The success of any information security awareness program heavily relies on how the content is communicated to its audience [7]. Therefore, it is vital to select the most suitable information security training delivery method [1]. Hence, there is a need to develop a guideline for healthcare organizations to select the most suitable training delivery method for implementation of information security awareness program. It is important to develop a good training delivery method for information security awareness program that is accepted by employees to promote their participation.
Image of page 1

Info icon This preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Image of page 2
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern