Security Risk Management in Healthcare: A Case Study

Abstract

We investigated the effectiveness of a security risk management program at a large healthcare institution. Using a survey, we explored how nine critical success factors : executive management support, organizational maturity, open communication, risk management stakeholders, team member empowerment, holistic view for an organization, security maintenance, corporate security strategy, and human resource development impacted SRM effectiveness. Learning Objectives: Introduce the audience to security risk management in a healthcare setting. Explain the value of unstructured interviews in the healthcare context. Highlight potential for future research in this area.