Evaluating a Cybersecurity Operations Center Implementation Program in a Regional Healthcare System: Challenges and Lessons Learned
| dc.contributor.author | Cram, W. Alec | |
| dc.contributor.author | Mckillop, Ian | |
| dc.date.accessioned | 2023-12-26T18:42:02Z | |
| dc.date.available | 2023-12-26T18:42:02Z | |
| dc.date.issued | 2024-01-03 | |
| dc.identifier.doi | https://doi.org/10.24251/HICSS.2024.451 | |
| dc.identifier.isbn | 978-0-9981331-7-1 | |
| dc.identifier.other | cbfdd364-e9f1-4b71-b56a-6e38b8882942 | |
| dc.identifier.uri | https://hdl.handle.net/10125/106834 | |
| dc.language.iso | eng | |
| dc.relation.ispartof | Proceedings of the 57th Hawaii International Conference on System Sciences | |
| dc.rights | Attribution-NonCommercial-NoDerivatives 4.0 International | |
| dc.rights.uri | https://creativecommons.org/licenses/by-nc-nd/4.0/ | |
| dc.subject | Security and Privacy Challenges for Healthcare | |
| dc.subject | cybersecurity | |
| dc.subject | healthcare | |
| dc.subject | operations center | |
| dc.title | Evaluating a Cybersecurity Operations Center Implementation Program in a Regional Healthcare System: Challenges and Lessons Learned | |
| dc.type | Conference Paper | |
| dc.type.dcmi | Text | |
| dcterms.abstract | In an effort to address escalating cybersecurity risks, healthcare organizations are increasingly turning to shared service operations centers to help coordinate day-to-day cybersecurity activities, such as training, incident response, and policy management. This research examines an early-stage program to establish a series of cybersecurity operations centers within a large, regional, publicly funded healthcare system. Over 13 months, the authors acted as expert advisors on the project and simultaneously undertook an ethnographic study, including a review of project documents, observation of stakeholder meetings, and an examination of 29 interview transcripts. The results of our analysis highlight the challenges facing healthcare leaders seeking to implement operational cybersecurity initiatives. In particular, we highlight tensions that emerged related to the oversight structure, guiding framework, performance management, and initiative validation. Our analysis points to a series of responses that healthcare leaders can undertake to avoid common pitfalls and achieve positive outcomes from such projects. | |
| dcterms.extent | 10 pages | |
| prism.startingpage | 3739 |
Files
Original bundle
1 - 1 of 1
