西班牙医疗保健中心的安全实践和内部威胁:基于调查的风险评估
Isabel Herrera Montano1, Susel Góngora Alonso1, Soledad Sañudo García2
1Department of Signal Theory and Communications and Telematics Engineering University of Valladolid, Paseo de Belén, 15, 47011 Valladolid, Spain.
International journal of medical informatics
|September 5, 2025
概括
医疗保健专业人员表现出严重的安全漏洞,许多人缺乏数据使用控制,只依赖密码. 为了打击内部威胁,迫切需要改进身份验证,加密和数据传输.
科学领域:
- 医疗信息学
- 信息安全
- 网络安全
背景情况:
- 内部威胁对医院信息系统 (HIS) 中敏感的患者数据构成重大风险.
- 授权人员可以无意或故意损害数据的机密性,完整性和可用性.
- 评估医疗保健专业人员当前的信息安全实践对于识别漏洞至关重要.
研究的目的:
- 评估西班牙医疗中心医疗保健专业人员的信息安全实践.
- 确定与数据保护和内部威胁有关的关键安全漏洞.
- 为医疗环境制定量身定制的安全策略提供信息.
主要方法:
- 一项涉及41名医疗保健专业人员的描述性,横截面研究.
- 对访问控制,加密,通讯道和数据使用控制的做法进行分析.
- 采用了包括千平方,克拉梅尔V,K-平均集群,PCA和随机森林建模在内的统计方法.
主要成果:
- 发现了重大安全缺陷,包括数据使用控制不足 (31.7%) 和数据加密率低 (29.3%在静止状态,36.6%在传输状态).
- 超过40%的参与者使用个人通讯道来获取敏感数据,97.6%的参与者仅使用密码进行身份验证.
- 目前的做法不足以有效地减轻医疗保健机构内部的威胁.
结论:
- 医疗机构迫切需要加强内部数据保护措施.
- 安全策略必须根据用户风险概况进行个性化,并结合强大的身份验证和全面加密.
- 持续的网络安全培训和更严格的数据传输控制对于减少内部威胁的风险至关重要.
更多相关视频
相关概念视频
Ethical Standards I
959
The American Nurses Association (ANA) created and implemented the first nationally accepted Code of Ethics for Nurses with Interpretive Statements. The Code of Ethics is a living document regularly updated by the ANA and establishes an ethical standard that is non-negotiable for nurses in all roles and settings.
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
959
Types of Reports II: Incident or Occurrence Report
945
An Incident or Occurrence Report in a healthcare setting is a crucial document used to record any unexpected occurrence that may or may not have affected a patient, employee, or visitor. Such reports are critical to improving patient safety and include all details leading up to and including the event.
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
945
Healthcare Associated Infections II: Preventive Measures
2.8K
Essential infection prevention measures are based on the knowledge of the infection chain, the modes of transmission in healthcare settings, and the use of the best practices in all healthcare settings. Compulsory public reporting of healthcare-associated infection rates is needed to allow individuals and the community to make informed choices regarding selecting a healthcare facility.
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
2.8K
Guidelines and Strategies for Safe Computer Charting
869
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
869
Legal Guidelines for Documentation
1.4K
The legal guidelines for nursing documentation are essential for ensuring accurate, professional, and ethical recording of patient care. The guidelines are discussed here:
1.4K
Ethical Standards II
789
Ethical standards are the backbone of nursing practice, guiding nurses as they interact with patients, families, and colleagues. These standards are crucial for providing safe, empathetic care centered on the patient's needs.
Nurses are entrusted with upholding various ethical principles and standards. Nurses forge solid therapeutic relationships using trust, empathy, autonomy, confidentiality, and professional competence.
Confidentiality is crucial, embodying respect for individual privacy...
Nurses are entrusted with upholding various ethical principles and standards. Nurses forge solid therapeutic relationships using trust, empathy, autonomy, confidentiality, and professional competence.
Confidentiality is crucial, embodying respect for individual privacy...
789


