Review of information security guidelines for awareness training program in healthcare industry

Arash Ghazvini, Zarina Shukur

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Citation (Scopus)

Abstract

Human errors are known as the most serious threats to information security in Electronic Health Record systems. Nevertheless, human errors can be prevented through effective information security awareness training programs. Even though there is an increasing number of training and awareness programs in the area of information security, there is limited evidence to verify their effectiveness in a real job environment. The aim of this paper is to review and evaluate some of the existing guidelines for developing an awareness training program. These guidelines can help organizations to identify security awareness training needs and develop a training plan. However, Despite the valuable inputs provided by these guidelines, there are shortcomings that are discussed in this paper.

Original languageEnglish
Title of host publicationProceedings of the 2017 6th International Conference on Electrical Engineering and Informatics
Subtitle of host publicationSustainable Society Through Digital Innovation, ICEEI 2017
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages1-6
Number of pages6
Volume2017-November
ISBN (Electronic)9781538604755
DOIs
Publication statusPublished - 9 Mar 2018
Event6th International Conference on Electrical Engineering and Informatics, ICEEI 2017 - Langkawi, Malaysia
Duration: 25 Nov 201727 Nov 2017

Other

Other6th International Conference on Electrical Engineering and Informatics, ICEEI 2017
CountryMalaysia
CityLangkawi
Period25/11/1727/11/17

Fingerprint

Health Care Sector
Information Security
Security of data
Healthcare
Industry
Guidelines
Education
Human Error
Electronic Health Records
Organizations
Health
Review
Awareness
Training
Electronics
Verify
Evaluate

Keywords

  • awareness training programs
  • human errors
  • information security
  • information security Guidelines
  • information security policy
  • training content

ASJC Scopus subject areas

  • Artificial Intelligence
  • Control and Optimization
  • Computer Networks and Communications
  • Computer Vision and Pattern Recognition
  • Information Systems
  • Software
  • Electrical and Electronic Engineering
  • Health Informatics

Cite this

Ghazvini, A., & Shukur, Z. (2018). Review of information security guidelines for awareness training program in healthcare industry. In Proceedings of the 2017 6th International Conference on Electrical Engineering and Informatics: Sustainable Society Through Digital Innovation, ICEEI 2017 (Vol. 2017-November, pp. 1-6). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICEEI.2017.8312399

Review of information security guidelines for awareness training program in healthcare industry. / Ghazvini, Arash; Shukur, Zarina.

Proceedings of the 2017 6th International Conference on Electrical Engineering and Informatics: Sustainable Society Through Digital Innovation, ICEEI 2017. Vol. 2017-November Institute of Electrical and Electronics Engineers Inc., 2018. p. 1-6.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Ghazvini, A & Shukur, Z 2018, Review of information security guidelines for awareness training program in healthcare industry. in Proceedings of the 2017 6th International Conference on Electrical Engineering and Informatics: Sustainable Society Through Digital Innovation, ICEEI 2017. vol. 2017-November, Institute of Electrical and Electronics Engineers Inc., pp. 1-6, 6th International Conference on Electrical Engineering and Informatics, ICEEI 2017, Langkawi, Malaysia, 25/11/17. https://doi.org/10.1109/ICEEI.2017.8312399
Ghazvini A, Shukur Z. Review of information security guidelines for awareness training program in healthcare industry. In Proceedings of the 2017 6th International Conference on Electrical Engineering and Informatics: Sustainable Society Through Digital Innovation, ICEEI 2017. Vol. 2017-November. Institute of Electrical and Electronics Engineers Inc. 2018. p. 1-6 https://doi.org/10.1109/ICEEI.2017.8312399
Ghazvini, Arash ; Shukur, Zarina. / Review of information security guidelines for awareness training program in healthcare industry. Proceedings of the 2017 6th International Conference on Electrical Engineering and Informatics: Sustainable Society Through Digital Innovation, ICEEI 2017. Vol. 2017-November Institute of Electrical and Electronics Engineers Inc., 2018. pp. 1-6
@inproceedings{1dc6f79b74a84ababdc63cdc6a8edac4,
title = "Review of information security guidelines for awareness training program in healthcare industry",
abstract = "Human errors are known as the most serious threats to information security in Electronic Health Record systems. Nevertheless, human errors can be prevented through effective information security awareness training programs. Even though there is an increasing number of training and awareness programs in the area of information security, there is limited evidence to verify their effectiveness in a real job environment. The aim of this paper is to review and evaluate some of the existing guidelines for developing an awareness training program. These guidelines can help organizations to identify security awareness training needs and develop a training plan. However, Despite the valuable inputs provided by these guidelines, there are shortcomings that are discussed in this paper.",
keywords = "awareness training programs, human errors, information security, information security Guidelines, information security policy, training content",
author = "Arash Ghazvini and Zarina Shukur",
year = "2018",
month = "3",
day = "9",
doi = "10.1109/ICEEI.2017.8312399",
language = "English",
volume = "2017-November",
pages = "1--6",
booktitle = "Proceedings of the 2017 6th International Conference on Electrical Engineering and Informatics",
publisher = "Institute of Electrical and Electronics Engineers Inc.",

}

TY - GEN

T1 - Review of information security guidelines for awareness training program in healthcare industry

AU - Ghazvini, Arash

AU - Shukur, Zarina

PY - 2018/3/9

Y1 - 2018/3/9

N2 - Human errors are known as the most serious threats to information security in Electronic Health Record systems. Nevertheless, human errors can be prevented through effective information security awareness training programs. Even though there is an increasing number of training and awareness programs in the area of information security, there is limited evidence to verify their effectiveness in a real job environment. The aim of this paper is to review and evaluate some of the existing guidelines for developing an awareness training program. These guidelines can help organizations to identify security awareness training needs and develop a training plan. However, Despite the valuable inputs provided by these guidelines, there are shortcomings that are discussed in this paper.

AB - Human errors are known as the most serious threats to information security in Electronic Health Record systems. Nevertheless, human errors can be prevented through effective information security awareness training programs. Even though there is an increasing number of training and awareness programs in the area of information security, there is limited evidence to verify their effectiveness in a real job environment. The aim of this paper is to review and evaluate some of the existing guidelines for developing an awareness training program. These guidelines can help organizations to identify security awareness training needs and develop a training plan. However, Despite the valuable inputs provided by these guidelines, there are shortcomings that are discussed in this paper.

KW - awareness training programs

KW - human errors

KW - information security

KW - information security Guidelines

KW - information security policy

KW - training content

UR - http://www.scopus.com/inward/record.url?scp=85050770123&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85050770123&partnerID=8YFLogxK

U2 - 10.1109/ICEEI.2017.8312399

DO - 10.1109/ICEEI.2017.8312399

M3 - Conference contribution

VL - 2017-November

SP - 1

EP - 6

BT - Proceedings of the 2017 6th International Conference on Electrical Engineering and Informatics

PB - Institute of Electrical and Electronics Engineers Inc.

ER -