SecHealth: enhancing EHR security in digital health transformation.

Yeng, Prosper K.; Fauzi, M. Ali; Yang, Bian; Diekuu, John-Bosco; Nimbe, Peter; Holik, Filip; Khatiwada, Pankaj; Fahmi, Akbar; Sun, Luyi

Abstract

In the contemporary wave of digital transformation, the implementation of electronic health records (EHRs) has become a pivotal undertaking for numerous nations. However, amidst this technological advancement, a critical facet deserving heightened attention is the security and privacy of these electronic health systems. Regrettably, this crucial concern often finds itself eclipsed by other aspects of digitalization. Consequently, these oversight lapses create vulnerabilities within the EHR framework, leaving them open and exposed to an array of malicious cyber intrusions. In response to this pressing issue, our study delves into a comprehensive evaluation of security measures within the ambit of African digital health strategies. Remarkably, among the number of approximately 42 nations that have embarked on digital health strategy formulation, a mere 2 countries have taken cognizance of the imperative to integrate robust security and privacy policies into their healthcare-oriented digital transformation initiatives. In light of this disconcerting revelation, we present an actionable roadmap that endeavours to fortify EHR security, aligning with the progressive "shift-left" paradigm. By advocating for the proactive integration of security measures from the inception of EHR development, we strive to curtail vulnerabilities and enhance the overall resilience of these systems. Our proposed roadmap stands as a clarion call for governments, healthcare authorities, and technology stakeholders to collectively prioritize security in tandem with digital health advancement, thereby fostering a safeguarded and privacy-respecting electronic healthcare landscape.

Citation

YENG, P., FAUZI, M.A., YANG, B., DIEKUU, J.-B., NIMBE, P., HOLIK, F., KHATIWADA, P., FAHMI, A. and SUN, L. 2023. SecHealth: enhancing EHR security in digital health transformation. In Widasari, E.R. and Adikara, P.P. (eds.) SIET '23: proceedings of the 8th International conference on sustainable information engineering and technology (SIET '23), 24-25 October 2023, Bali, Indonesia. New York: ACM [online], pages 538-544. Available from: https://doi.org/10.1145/3626641.3627214

• Conference Name: 8th International conference on sustainable information engineering and technology (SIET)2023 (SIET '23)
• Conference Location: Bali, Indonesia
• Start Date: Oct 24, 2023
• End Date: Oct 25, 2023
• Acceptance Date: Sep 25, 2023
• Online Publication Date: Dec 27, 2023
• Publication Date: Dec 31, 2023
• Deposit Date: Jan 25, 2024
• Publicly Available Date: Jan 25, 2024
• Publisher: Association for Computing Machinery (ACM)
• Pages: 538-544
• Series Title: ACM international conference proceeding series (ICPS)
• Book Title: SIET '23: proceedings of the 8th International conference on sustainable information engineering and technology
• ISBN: 9798400708503
• DOI: https://doi.org/10.1145/3626641.3627214
• Keywords: Healthcare; Cybersecurity; Threat modeling; Threat identification
• Public URL: https://rgu-repository.worktribe.com/output/2189217