Electronic Patient Record Security Policy in Saudi Arabia National Health Service

De Montfort University Open Research Archive

Show simple item record

dc.contributor.author Aldajani, Mouhamad
dc.date.accessioned 2012-05-16T08:31:42Z
dc.date.available 2012-05-16T08:31:42Z
dc.date.issued 2012
dc.identifier.uri http://hdl.handle.net/2086/6016
dc.description.abstract Saudi Arabia is in the process of implementing Electronic Patient Records (EPR) throughout its National Health services. One of the key challenges during the adoption process is the security of EPR. This thesis investigates the current state of EPR security in Saudi Arabia’s National Health Services (SA NHS) both from a policy perspective and with regard to its implementation in SA NHS’s information systems. To facilitate the analysis of EPR security, an EPR model has been developed that captures the information that is stored as part of the electronic record system in conjunction with stated security requirements. This model is used in the analysis of policy consistency and to validate operational reality against stated policies at various levels within the SA NHS. The model is based on a comprehensive literature survey and structured interviews which established the current state of practice with respect to EPRs in a representative Saudi Arabian hospital. The key contribution of this research is the development and evaluation of a structured and model-based analysis approach to EPR security at the early adoption stage in SA, based on types of information present in EPRs and the needs of the users of EPRs. The key findings show that the SA EPR adoption process is currently proceeding without serious consideration for security policy to protect EPR and a lack of awareness amongst hospital staff. en
dc.description.sponsorship Saudi Cultural Bureau en
dc.language.iso en en
dc.publisher De Montfort University en
dc.subject information security en
dc.subject access control policy en
dc.subject EPR en
dc.subject Saudi Arabia en
dc.title Electronic Patient Record Security Policy in Saudi Arabia National Health Service en
dc.type Thesis or dissertation en
dc.publisher.department Faculty of Technology en
dc.publisher.department Software Technology Research Laboratory en
dc.type.qualificationlevel Doctoral en
dc.type.qualificationname PhD en

Files in this item

This item appears in the following Collection(s)

Show simple item record