Knowledge, Attitude, and Performance of Health Information Management Staff of Iranian Hospitals about Health Information Security

Document Type : Original Article

Authors
Mohammad Dehghani 1
Zari Rahmatpasand-Fatideh 2
Zahra Arasteh 3
Kobra Shokrizadeh-Bezenjani 4
1 PhD Student, Health Information Management, Student Research Committee AND Scientific and Educational Center for Health Management of Iran AND Department of Health Information Technology, School of Management and Medical Information, Tabriz University of Medical Sciences, Tabriz, Iran
2 BSc, Medical Records, Iran Psychiatric Medical Education Center, Iran University of Medical Sciences, Tehran, Iran
3 BSc, Medical Records, Khaf 22 Bahman Hospital, Mashhad University of Medical Sciences, Mashhad, Iran
4 BSc, Medical Records, Kerman University of Medical Sciences, Kerman, Iran
10.22122/him.v16i1.3727
Abstract
Introduction: Today, the nature of data and information in health care organizations has led to a greater emphasis on health information security. Considering the role of the hospitals’ health information management staff in this issue, this study investigated their knowledge, attitude, and performance about health information security.Methods: This descriptive-analytic study was conducted on 367 employees of health information management in Iranian hospitals in 2018. After confirming its validity and reliability, a questionnaire was sent to the participants via social networks. In this study, Pearson coefficient, independent t, and ANOVA tests were used to assess the hypotheses.Results: Scores for knowledge, attitude, and performance of participants regarding health information security were 0.67 ± 0.25, 3.35 ± 0.53, and 1.47 ± 0.41, respectively. Furthermore, the scores in each of these three dimensions had a direct and significant relationship with age, work history, academic achievement, and field of study (P = 0.001).Conclusion: Considering the state of knowledge, attitude, and performance of employees, it is possible to improve the status of health information security in hospitals by conducting training courses.

Keywords

  1. Kheiri S. Identification, Analysis, and ranking of the key parameters affecting the implementation of the information security management system (ISMS) in the public (State) organizations. Maritime Transport Industry 2016; 2(3): 36-46. [In Persian].
  2. Cushman R, Froomkin AM, Cava A, Abril P, Goodman KW. Ethical, legal and social issues for personal health records and applications. J Biomed Inform 2010; 43(5 Suppl): S51-S55.
  3. Khara R, Saremian M. Comprehensive overview of the health information security risks in mobile devices. Journal of Health and Biomedical Informatics 2015; 2(1): 48-56. [In Persian].
  4. Health and the Information Highway Division, Health Canada. Pan-Canadian Health Information Privacy and Confidentiality Framework. Ottawa, Canada: Health Canada; 2005.
  5. Ajami S, Afkhami S. Confidentiality of information in the electronic exchange of patient data. Health Inf Manage 2016; 13(1): 1-2. [In Persian].
  6. Arab M, Pourreza A, Eshraghian M, Khabiri R. A survey on current status of patient information privacy in Tehran's hospitals, Iran. Health Inf Manage 2011; 8(1): 37-44. [In Persian].
  7. Nasiri E, Kelidari H, Bahrami S. A survey on revealing disease names or diagnoses and patients' views on confidentiality in hospitals affiliated with Mazandaran University of Medical Sciences. Iran J Med Ethics Hist Med 2016; 9(3): 93-105. [In Persian].
  8. Karami M, Safdari R, Soltani A. Patient's information rights: Strategies for information security in the electronic environment. Med Ethics 2013; 7(25): 83-96. [In Persian].
  9. Sheikh Abumasoudi R, Amini N, Esmaeili N. Indicators of patient information confidentiality. Health Inf Manage 2015; 12(4): 393-404. [In Persian].
  10. Davis NA, LaCour M. Introduction to health information technology. Philadelphia, PA: Saunders; 2002.
  11. Sadoughi F, Khoshgam M, Behnam S. Acomparative investigation of the access levels and confidentiality of medical documents in Iran and selected countries. J Health Adm 2007; 10(28): 49-56. [In Persian].
  12. Park WS, Seo SW, Son SS, Lee MJ, Kim SH, Choi EM, et al. Analysis of information security management systems at 5 domestic hospitals with more than 500 beds. Healthc Inform Res 2010; 16(2): 89-99.
  13. Hosseinian V, Ayatollahi H, Haghani H, Mehraeen E. Requirements of information security in a telemedicine network: Review of IT managers' opinion. Paramedical Science and Rehabilitation 2015; 4(2): 31-40. [In Persian].
  14. Meidani Z, Assari MA, Mosavi SG, Ataei-Andezag A. Evaluation of hospital information systems security. Health Inf Manage 2017; 14(5): 187-93. [In Persian].
  15. Das S, Mukhopadhyay A. Security and privacy challenges in telemedicine. CSI Communications 2011; 35(8): 20-3.
  16. Kruger HA, Steyn T, Drevin L, Medlin BD. How secure are passwords that will be used by future health care workers? In redefining an agenda for Information Security. Proceedings of the 7th Annual Conference Security; 2008 June 2-3; Las Vegas, NV, USA.
  17. El Emam K, Moreau K, Jonker E. How strong are passwords used to protect personal health information in clinical trials? J Med Internet Res 2011; 13(1): e18.
  18. Fernandez-Aleman JL, Sanchez-Henarejos A, Toval A, Sanchez-Garcia AB, Hernandez-Hernandez I, Fernandez-Luque L. Analysis of health professional security behaviors in a real clinical setting: An empirical study. Int J Med Inform 2015; 84(6): 454-67.