The perception of the importance of information security controls in Brazilian public hospitals

• Autor(a) principal: Albuquerque-Junior, Antonio Eduardo de
• Data de Publicação: 2013
• Outros Autores: Santos, Ernani Marques dos
• Tipo de documento: Artigo
• Idioma: por
• Título da fonte: RECIIS (Online)
• Texto Completo: https://www.reciis.icict.fiocruz.br/index.php/reciis/article/view/454
• topic: Information Technology; Health Informatics; Information Security; Hospital management; Public sector.; Tecnologia da Informação; Informática em Saúde; Segurança da Informação; Gestão hospitalar; Setor público.

Public hospitals must adopt information security for their activities because they are dependent on the information technology (IT) infrastructure and must protect information due to legal regulations and the importance of such information. This is necessary because public hospitals manage sensitive information, which is important for their operation, and patient privacy should be ensured. The NBR ISO/IEC 27002:2005 standard proposes 133 controls to protect information for different organizations; but we must identify the controls that are important for public hospital activities and information. This study was aimed at discerning the perceived importance of information security controls for public hospital managers as well as IT and information security professionals given such institutions’ activities.