1. INFORMATION SECURITY AND
PRIVACY
Tasnim Hafiz, hafty01p
Research Student
University Of South Australia

2. Information system security and
privacy: A Background
 The emergence of Information Systems
raises information security issues.
 Rand Report R -609 :The first published
document by DARPA to widen the scope of
Information Security.
 NSTISSI No 4011: A widely accepted
evaluation standard for security of IS

3. Characteristics of
Information
 Availability
 Accuracy
 Authenticity
 Confidentiality
 Integrity
 Utility
 Possession

4. Why is information security and
privacy a contemporary issue?
Due to the increase of threats to the
characteristics of information, to name a few:
 Fraud
 Hoaxes
 IdentityTheft
 System Hacking
 Disclosure
 Privacy breach

5. Information security and privacy in
EMR systems
 Domain of research: Healthcare IS
 Scope: Information security and privacy of
EMR systems
 What is Healthcare IS?
 What is EMR?

6. Ssshhh...don’t tell
 Why security and privacy of medical data is
important?
-Simple, would you like your friends to find out
that you’re seeing a therapist regularly
because you are unable to manage stress ?

7. Literature Review
Authors Their respective findings
 Raghupathi
 Bates at al
 Rindfleish
 Barrows and Clayton
 Rind et al
 Buckovich
 General Health IS
 EMR in Primary Care
 Privacy and information
security of healthcare
systems.
 Examines privacy concerns
 Proposal to identify patients
electronically
 Forwards a set of draft
principles of information
security

8. Important issues in the
literature identified contd.
 A shift from paper record systems to
electronic record systems
 The integration of information due to of
medical information systems, examples
 W3EMRS
 EMR systems in primary care

9. WHAT HAPPENED AT THE
STANFORD HOSPITAL AND
CLINICS?
An anecdote

10. Important issues in the
literature identified contd.
 Measures to protect information security and
privacy
 Future Recommendations

11. Key findings and their future
recommendations
 Successful migration to EMR system and an
increase in the number of end-users is
anticipated
 EMR and information security can be
deployed in the Aged Care industry.
 The potentials of EMR are being held due to
information security issues

12. Key findings and their
future recommendations
 Responsibility to maintain information
security and privacy is not just upon EMR
systems

13. References
 Barrows, RC, andClayton, PD, 1996, ‘Privacy, confidentiality, and electronic medical
records ’, Journal of the American medical Informatics Association, vol. 3, no. 2, pp. 139-148, viewed
15 September 2011, Jamia, DOI: 10.1136/jamia.1996.96236282
 Buckovich, SA, Rippen,HE, & Rozen, MJ ,1999, ‘Driving toward guiding principles:A goal for
privacy confidentiality, and security of health information ’, Journal of the American medical
Informatics Association, vol. 6, no. 2, pp. 122-133, viewed 14 September 2011, Jamia,
DOI:10.1136/jamia.1999.0060122
 Bates, DW, Ebell, M, Gotlieb ,E, Zapp ,J, & Mullins HC, 2003, ‘A proposal for electronic medical
records in U.S. primary care’, Journal of the American Medical Informatics Association, vol. 10, no. 1,
pp. 1-10, viewed 15 September 2011, Jamia, DOI: 10.1197/jamia.M1097
 Raghupathi,W, 1997, ‘Health care information systems’, Communications of the ACM, vol. 40, no. 8
, pp. 80-82, viewed 22August 2011,ACM Digital Library DOI=10.1145/257874.257894
 Rind ,DM, Kohane,IS, & Szolovits P,1997, ‘Maintaining the confidentiality of medical records
shared over the Internet and theWorldWideWeb ’, Annals of Internal Medicine, vol. 127, no. 2, pp.
138-141, viewed 13 September 2011, Jamia, http://www.annals.org/content/127/2/138.short
 Rindfleisch,T, 1997, ‘Privacy, information technology, and health care’, Communications of the
ACM , vol.40, no. 8 , pp. 92-100, viewed 16 August 2011,ACM Digital Library,
DOI:10.1145/257874.257896
 And more

14. THANK YOU!
Would’ve been a pleasure to present
personally, hope everyone enjoyed
reading!