Paper Info
Title
Health-Care Security Strategies for Data Protection and Regulatory Compliance.
Abstract
This study identifies how security performance and compliance influence each other and how security resources contribute to two security outcomes: data protection and regulatory compliance. Using simultaneous equation models and data from 243 hospitals, we find that the effects of security resources vary for data breaches and perceived compliance and that security operational maturity plays an important role in the outcomes. In operationally mature organizations, breach occurrences hurt compliance, but, surprisingly, compliance does not affect actual security. In operationally immature organizations, breach occurrences do not affect compliance, whereas compliance significantly improves actual security. The results imply that operationally mature organizations are more likely to be motivated by actual security than compliance, whereas operationally immature organizations are more likely to be motivated by compliance than actual security. Our findings provide policy insights on effective security programs in complex health-care environments.
Year
DOI
Venue
2013
10.2753/MIS0742-1222300202
JOURNAL OF MANAGEMENT INFORMATION SYSTEMS
Keywords
DocType
Volume
compliance,data breach,health care,organizational maturity,security
Journal
30
Issue
ISSN
Citations 
2
0742-1222
10
PageRank 
References 
Authors
0.60
33
2
Name
Order
Citations
PageRank
Juhee Kwon1336.08
M. Eric Johnson238638.41