Carregant...
Fitxers
Tipus de document
ArticleVersió
Versió publicadaData de publicació
Llicència de publicació
Si us plau utilitzeu sempre aquest identificador per citar o enllaçar aquest document: https://hdl.handle.net/2445/177038
Comprehensive user requirements engineering methodology for secure and interoperable health data exchange
Títol de la revista
Director/Tutor
ISSN de la revista
Títol del volum
Recurs relacionat
Resum
Background: Increased digitalization of healthcare comes along with the cost of cybercrime proliferation. This results to patients' and healthcare providers' skepticism to adopt Health Information Technologies (HIT). In Europe, this shortcoming hampers efficient cross-border health data exchange, which requires a holistic, secure and interoperable framework. This study aimed to provide the foundations for designing a secure and interoperable toolkit for cross-border health data exchange within the European Union (EU), conducted in the scope of the KONFIDO project. Particularly, we present our user requirements engineering methodology and the obtained results, driving the technical design of the KONFIDO toolkit. Methods: Our methodology relied on four pillars: (a) a gap analysis study, reviewing a range of relevant projects/initiatives, technologies as well as cybersecurity strategies for HIT interoperability and cybersecurity; (b) the definition of user scenarios with major focus on cross-border health data exchange in the three pilot countries of the project; (c) a user requirements elicitation phase containing a threat analysis of the business processes entailed in the user scenarios, and (d) surveying and discussing with key stakeholders, aiming to validate the obtained outcomes and identify barriers and facilitators for HIT adoption linked with cybersecurity and interoperability. Results: According to the gap analysis outcomes, full adherence with information security standards is currently not universally met. Sustainability plans shall be defined for adapting existing/evolving frameworks to the state-of-the-art. Overall, lack of integration in a holistic security approach was clearly identified. For each user scenario, we concluded with a comprehensive workflow, highlighting challenges and open issues for their application in our pilot sites. The threat analysis resulted in a set of 30 user goals in total, documented in detail. Finally, indicative barriers of HIT acceptance include lack of awareness regarding HIT risks and legislations, lack of a security-oriented culture and management commitment, as well as usability constraints, while important facilitators concern the adoption of standards and current efforts for a common EU legislation framework. Conclusions: Our study provides important insights to address secure and interoperable health data exchange, while our methodological framework constitutes a paradigm for investigating diverse cybersecurity-related risks in the health sector.
Matèries (anglès)
Citació
Col·leccions
Citació
NATSIAVAS, Pantelis, RASMUSSEN, Janne, VOSS KNUDE, Maja, VOTIS, Kostas, COPPOLINO, Luigi, CAMPEGIANI, Paolo, CANO FRANCO, Isaac, MARI, David, FAIELLA, Giuliana, CLEMENTE, Fabrizio, NALIN, Marco, GRIVAS, Evangelos, STAN, Oana, GELENBE, Erol, DUMORTIER, Jos, PETERSEN, Jan, TZOVARAS, Dimitrios, ROMANO, Luigi, KOMNIOS, Ioannis, KOUTKIAS, Vassilis. Comprehensive user requirements engineering methodology for secure and interoperable health data exchange. _BMC Medical Informatics and Decision Making_. 2018. Vol. 18, núm. 1, pàgs. 85. [consulta: 24 de gener de 2026]. ISSN: 1472-6947. [Disponible a: https://hdl.handle.net/2445/177038]