Evaluating a Cybersecurity Operations Center Implementation Program in a Regional Healthcare System: Challenges and Lessons Learned

Cram, W. Alec; Mckillop, Ian

Evaluating a Cybersecurity Operations Center Implementation Program in a Regional Healthcare System: Challenges and Lessons Learned

Files

0367.pdf (336.01 KB)

Date

2024-01-03

Authors

Cram, W. Alec

Mckillop, Ian

Starting Page

3739

Abstract

In an effort to address escalating cybersecurity risks, healthcare organizations are increasingly turning to shared service operations centers to help coordinate day-to-day cybersecurity activities, such as training, incident response, and policy management. This research examines an early-stage program to establish a series of cybersecurity operations centers within a large, regional, publicly funded healthcare system. Over 13 months, the authors acted as expert advisors on the project and simultaneously undertook an ethnographic study, including a review of project documents, observation of stakeholder meetings, and an examination of 29 interview transcripts. The results of our analysis highlight the challenges facing healthcare leaders seeking to implement operational cybersecurity initiatives. In particular, we highlight tensions that emerged related to the oversight structure, guiding framework, performance management, and initiative validation. Our analysis points to a series of responses that healthcare leaders can undertake to avoid common pitfalls and achieve positive outcomes from such projects.

Keywords

Security and Privacy Challenges for Healthcare, cybersecurity, healthcare, operations center

URI

https://hdl.handle.net/10125/106834

Extent

10 pages

Related To

Proceedings of the 57th Hawaii International Conference on System Sciences

Rights

Attribution-NonCommercial-NoDerivatives 4.0 International

Collections

Security and Privacy Challenges for Healthcare

Full item page

Email libraryada-l@lists.hawaii.edu if you need this content in ADA-compliant format.