Please use this identifier to cite or link to this item:
Title: Comprehensive user requirements engineering methodology for secure and interoperable health data exchange
Author: Natsiavas, Pantelis
Rasmussen, Janne
Voss Knude, Maja
Votis, Kostas
Coppolino, Luigi
Campegiani, Paolo
Cano Franco, Isaac
Mari, David
Faiella, Giuliana
Clemente, Fabrizio
Nalin, Marco
Grivas, Evangelos
Stan, Oana
Gelenbe, Erol
Dumortier, Jos
Petersen, Jan
Tzovaras, Dimitrios
Romano, Luigi
Komnios, Ioannis
Koutkias, Vassilis
Keywords: Seguretat informàtica
Interoperabilitat en xarxes d'ordinadors
Computer security
Internetworking (Telecommunication)
Issue Date: 16-Oct-2018
Publisher: BioMed Central
Abstract: Background: Increased digitalization of healthcare comes along with the cost of cybercrime proliferation. This results to patients' and healthcare providers' skepticism to adopt Health Information Technologies (HIT). In Europe, this shortcoming hampers efficient cross-border health data exchange, which requires a holistic, secure and interoperable framework. This study aimed to provide the foundations for designing a secure and interoperable toolkit for cross-border health data exchange within the European Union (EU), conducted in the scope of the KONFIDO project. Particularly, we present our user requirements engineering methodology and the obtained results, driving the technical design of the KONFIDO toolkit. Methods: Our methodology relied on four pillars: (a) a gap analysis study, reviewing a range of relevant projects/initiatives, technologies as well as cybersecurity strategies for HIT interoperability and cybersecurity; (b) the definition of user scenarios with major focus on cross-border health data exchange in the three pilot countries of the project; (c) a user requirements elicitation phase containing a threat analysis of the business processes entailed in the user scenarios, and (d) surveying and discussing with key stakeholders, aiming to validate the obtained outcomes and identify barriers and facilitators for HIT adoption linked with cybersecurity and interoperability. Results: According to the gap analysis outcomes, full adherence with information security standards is currently not universally met. Sustainability plans shall be defined for adapting existing/evolving frameworks to the state-of-the-art. Overall, lack of integration in a holistic security approach was clearly identified. For each user scenario, we concluded with a comprehensive workflow, highlighting challenges and open issues for their application in our pilot sites. The threat analysis resulted in a set of 30 user goals in total, documented in detail. Finally, indicative barriers of HIT acceptance include lack of awareness regarding HIT risks and legislations, lack of a security-oriented culture and management commitment, as well as usability constraints, while important facilitators concern the adoption of standards and current efforts for a common EU legislation framework. Conclusions: Our study provides important insights to address secure and interoperable health data exchange, while our methodological framework constitutes a paradigm for investigating diverse cybersecurity-related risks in the health sector.
Note: Reproducció del document publicat a:
It is part of: BMC Medical Informatics and Decision Making, 2018, vol. 18, num. 1, p. 85
Related resource:
ISSN: 1472-6947
Appears in Collections:Articles publicats en revistes (Medicina)

Files in This Item:
File Description SizeFormat 
696554.pdf1.87 MBAdobe PDFView/Open

This item is licensed under a Creative Commons License Creative Commons