Evaluating a Cybersecurity Operations Center Implementation Program in a Regional Healthcare System: Challenges and Lessons Learned

Date

2024-01-03

Contributor

Advisor

Department

Instructor

Depositor

Speaker

Researcher

Consultant

Interviewer

Narrator

Transcriber

Annotator

Journal Title

Journal ISSN

Volume Title

Publisher

Volume

Number/Issue

Starting Page

3739

Ending Page

Alternative Title

Abstract

In an effort to address escalating cybersecurity risks, healthcare organizations are increasingly turning to shared service operations centers to help coordinate day-to-day cybersecurity activities, such as training, incident response, and policy management. This research examines an early-stage program to establish a series of cybersecurity operations centers within a large, regional, publicly funded healthcare system. Over 13 months, the authors acted as expert advisors on the project and simultaneously undertook an ethnographic study, including a review of project documents, observation of stakeholder meetings, and an examination of 29 interview transcripts. The results of our analysis highlight the challenges facing healthcare leaders seeking to implement operational cybersecurity initiatives. In particular, we highlight tensions that emerged related to the oversight structure, guiding framework, performance management, and initiative validation. Our analysis points to a series of responses that healthcare leaders can undertake to avoid common pitfalls and achieve positive outcomes from such projects.

Description

Keywords

Security and Privacy Challenges for Healthcare, cybersecurity, healthcare, operations center

Citation

Extent

10 pages

Format

Geographic Location

Time Period

Related To

Proceedings of the 57th Hawaii International Conference on System Sciences

Related To (URI)

Table of Contents

Rights

Attribution-NonCommercial-NoDerivatives 4.0 International

Rights Holder

Local Contexts

Email libraryada-l@lists.hawaii.edu if you need this content in ADA-compliant format.