An information security management strategy for healthcare institutions

This paper starts with a criticism of existing security management practices and argues why they are not adequate for health care enterprises and institutions. It further outlines a sociotechnical perspective on information security, from which an alternative approach and strategy for information security management practice is suggested.