{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,12]],"date-time":"2026-11-12T06:33:14Z","timestamp":1794465194537,"version":"4.9.1"},"publisher-location":"New York, NY","reference-count":52,"publisher":"Springer New York","isbn-type":[{"value":"9781461484943","type":"print"},{"value":"9781461484950","type":"electronic"}],"license":[{"start":{"date-parts":[[2013,1,1]],"date-time":"2013-01-01T00:00:00Z","timestamp":1356998400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2013,1,1]],"date-time":"2013-01-01T00:00:00Z","timestamp":1356998400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-1-4614-8495-0_18","type":"book-chapter","created":{"date-parts":[[2013,11,20]],"date-time":"2013-11-20T01:07:50Z","timestamp":1384909670000},"page":"401-416","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Security of the Electronic Medical Record"],"prefix":"10.1007","author":[{"given":"Sokratis K.","family":"Katsikas","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2013,11,21]]},"reference":[{"key":"18_CR1","unstructured":"http:\/\/www.transparencymarketresearch.com\/healthcare-cloud-computing.html. Accessed 30 January 2013."},{"key":"18_CR2","unstructured":"http:\/\/www.frost.com\/prod\/servlet\/press-release.pag?docid=267265445. Accessed 30 January 2013."},{"key":"18_CR3","unstructured":"HIMSS, 5th Annual HIMSS Security Survey, December 12, 2012, available at http:\/\/www.himss.org\/content\/files\/2012_HIMSS_SecuritySurvey.pdf. Accessed 30 January 2013."},{"key":"18_CR4","unstructured":"B. Schneier, Economics and Information Security, June 29, 2006, http:\/\/www.schneier.com\/blog\/archives\/2006\/06\/economics_and_i_1.html. Accessed January 30, 2013."},{"key":"18_CR5","unstructured":"D. Garets, M. Davis, \u201cElectronic Medical Records vs. Electronic Health Records: Yes, there is a difference\u201d, A HIMSS Analytics White Paper, January 26, 2006. Available at http:\/\/www.himssanalytics.org\/docs\/wp_emr_ehr.pdf. Accessed 30 January 2013."},{"key":"18_CR6","unstructured":"ISO, \u201cHealth Informatics\u2014Requirements for an Electronic Health Record Architecture\u201d, ISO\/TS 18308, 2003."},{"key":"18_CR7","unstructured":"ISO, \u201cHealth Informatics\u2014Electronic Health Record\u2014Definition, scope and context\u201d, ISO\/TR 20514, 2005."},{"key":"18_CR8","doi-asserted-by":"crossref","unstructured":"P. Tang, J. Ash, D. Bates, J. Overhage, D. Sands, \u201cPersonal Health Records: Definitions, Benefits, and Strategies for Overcoming Barriers to Adoption\u201d, J. of American Medical Informatics Association, Vol. 13, no. 2, 2006, pp. 121\u2013126.","DOI":"10.1197\/jamia.M2025"},{"key":"18_CR9","doi-asserted-by":"crossref","unstructured":"R. Zhang, L. Liu, \u201cSecurity models and requirements for healthcare application clouds\u201d, in Proceedings, 3rd International Conference on Cloud Computing (CLOUD), IEEE Press, pp. 268\u2013275, 2010. Available at http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-12\/800-12-html\/index.html. Accessed 30 January 2013.","DOI":"10.1109\/CLOUD.2010.62"},{"key":"18_CR10","unstructured":"National Institute of Standards and Technology, An Introduction to Computer Security: The NIST Handbook, US Department of Commerce, 1995."},{"key":"18_CR11","doi-asserted-by":"crossref","unstructured":"A. Pouloudi, \u201cFocus: Conflicting concerns over the privacy of electronic medical records in the NHSnet\u201d, Business Ethics, vol. 6, no. 2, 1997.","DOI":"10.1111\/1467-8608.00056"},{"key":"18_CR12","doi-asserted-by":"crossref","unstructured":"S. D. Warren, L. D. Brandeis, \u201cThe right to privacy\u201d, Harvard Law Review, vol. 4, issue 193, 1890.","DOI":"10.2307\/1321160"},{"key":"18_CR13","unstructured":"S. Katsikas, J. Lopez, G. Pernul, \u201cThe challenge for security and privacy services in distributed health settings\u201d, in B. Blobel, P. Pharow, M. Nerlich (Eds.), eHealth: Combining health telematics, telemedicine, biomedical engineering and bionfiromatics to the edge, IOS Press, 2008, pp. 113\u2013125."},{"key":"18_CR14","unstructured":"ISO\/IEC, \u201cHealth Informatics\u2014Information security management in health using ISO\/IEC 27002\u201d, ISO\/IEC 27799, 2008."},{"key":"18_CR15","unstructured":"American Health Information Management Association, \u201cAuditing copy and paste\u201d, Journal of American Health Information Management Association, vol. 80, issue 1, 2009, pp. 26\u201329."},{"key":"18_CR16","doi-asserted-by":"crossref","unstructured":"L. B. Harman, C. A. Flite, K. Bond, \u201dElectronic Health Records: Privacy, Confidentiality and Security\u201d, Virtual Mentor, Vol. 14, number 9, 2012, pp. 712\u2013719.","DOI":"10.1001\/virtualmentor.2012.14.9.stas1-1209"},{"key":"18_CR17","doi-asserted-by":"crossref","unstructured":"G. Narayana Samy, R. Ahmad, Z. Ismail, \u201cSecurity threats categories in healthcare information systems\u201d, Health Informatics Journal, Vol. 16, number 3, 2010, pp. 201\u2013209.","DOI":"10.1177\/1460458210377468"},{"key":"18_CR18","doi-asserted-by":"crossref","unstructured":"I. Maglogiannis, E. Zafiropoulos, \u201cModeling risk in distributed healthcare information systems\u201d, in Proceedings of 28$$^{th}$$ Annual International Conference of the IEEE on Engineering in Medical and Biology Society (EMBS), 2006, pp. 5447\u20135450.","DOI":"10.1109\/IEMBS.2006.260351"},{"key":"18_CR19","doi-asserted-by":"crossref","unstructured":"I. Maglogiannis, E. Zafiropoulos, A. Platis, C. Lambrinoudakis, \u201cRisk analysis of a patient monitoring system using Bayesian network modelling\u201d, Journal of Biomedical Informatics, Vol. 39, 2006, pp. 637\u2013647.","DOI":"10.1016\/j.jbi.2005.10.003"},{"key":"18_CR20","unstructured":"ENISA, Being diabetic in 2011: Identifying emerging and future risks in remote health monitoring and treatment, 2009."},{"key":"18_CR21","unstructured":"http:\/\/www.hhs.gov\/ocr\/privacy\/hipaa\/administrative\/privacyrule\/index.html. Accessed 14 April 2013."},{"key":"18_CR22","unstructured":"http:\/\/www.hhs.gov\/ocr\/privacy\/hipaa\/administrative\/securityrule\/. Accessed 14 April 2013."},{"key":"18_CR23","unstructured":"http:\/\/healthcare.partners.org\/phsirb\/hipaaglos.htm. Accessed 14 April 2013."},{"key":"18_CR24","unstructured":"http:\/\/www.hhs.gov\/ocr\/hipaa. Accessed 14 April 2013."},{"key":"18_CR25","doi-asserted-by":"crossref","unstructured":"S. Kahn, V. Sheshadri, \u201cMedical record privacy and security in a digital environment\u201d, IT Pro, March\/April, 2008, pp. 46\u201352.","DOI":"10.1109\/MITP.2008.34"},{"key":"18_CR26","unstructured":"http:\/\/www.hhs.gov\/ocr\/privacy\/hipaa\/administrative\/breachnotificationrule\/. Accessed 14 April 2013."},{"key":"18_CR27","unstructured":"http:\/\/www2.ftc.gov\/opa\/2009\/08\/hbn.shtm. Accessed 14 April 2013."},{"key":"18_CR28","doi-asserted-by":"crossref","unstructured":"K. T. Win, \u201cA review of security of electronic health records\u201d, Health Information Management, Vol. 34, no. 1, 2005, pp. 13\u201318.","DOI":"10.1177\/183335830503400105"},{"key":"18_CR29","unstructured":"http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=CELEX:31995L0046:en:NOT. Accessed 14 April 2013."},{"key":"18_CR30","doi-asserted-by":"crossref","unstructured":"M. Verschuuren et al., \u201cThe European data protection legislation and its consequences for public health monitoring: a plea for action\u201d, European Journal of Public Health, Vol. 18, no. 6, 2008, pp. 550\u2013551.","DOI":"10.1093\/eurpub\/ckn014"},{"key":"18_CR31","unstructured":"R. Clark, \u201cImplications of the EU data protection directive and council of Europe recommendations for healthcare establishments\u201d, In The ISHTAR Consortium (Eds.), Implementing Secure Healthcare Telematics Applications in Europe, IOS Press, 2001, pp. 33\u201352."},{"key":"18_CR32","unstructured":"C. Laske, \u201cLegal liability for telemedicine and healthcare networking\u201d, in The ISHTAR Consortium (Eds.), Implementing Secure Healthcare Telematics Applications in Europe, IOS Press, 2001, pp. 53\u2013100."},{"key":"18_CR33","unstructured":"http:\/\/ec.europa.eu\/justice\/newsroom\/data-protection\/news\/120125_en.htm. Accessed 14 April 2013."},{"key":"18_CR34","unstructured":"http:\/\/www.imia-medinfo.org\/new2\/pubdocs\/Ethics_Eng.pdf. Accessed 14 April 2013."},{"key":"18_CR35","unstructured":"http:\/\/library.ahima.org\/xpedio\/groups\/public\/documents\/ahima\/bok1_024277.hcsp?dDocName=bok1_024277. Accessed 14 April 2013."},{"key":"18_CR36","unstructured":"ISO\/IEC, \u201cInformation technology\u2014Security techniques\u2014Code of practice for information security management\u201d, ISO\/IEC 27002, 2005."},{"key":"18_CR37","unstructured":"http:\/\/www.27000.org\/iso-27002.htm. Accessed 14 April 2013."},{"key":"18_CR38","unstructured":"http:\/\/www.iso.org\/iso\/catalogue_detail?csnumber=41298. Accessed 14 April 2013."},{"key":"18_CR39","doi-asserted-by":"crossref","unstructured":"S. Katsikas, \u201cRisk Management\u201d, in J. Vacca (Ed.), Computer and Information Security Handbook, Morgan Kaufmann, 2009.","DOI":"10.1016\/B978-0-12-374354-1.00035-2"},{"key":"18_CR40","unstructured":"ISO\/IEC, \u201cInformation technology\u2014security techniques\u2014information security risk management\u201d, ISO\/IEC 27005:2011 (E)."},{"key":"18_CR41","doi-asserted-by":"crossref","unstructured":"S. K. Katsikas, S. Kokolakis, \u201cHigh-level Security Policies for Health Care Establishments\u201d, in B. Blobel (Ed). Health Informatics, IOS Press, 2003, pp. 98\u2013104.","DOI":"10.3233\/978-1-60750-940-0-98"},{"key":"18_CR42","unstructured":"C. Cresson-Wood, Information Security Policies Made Easy, Baseline Software, USA, 1991."},{"key":"18_CR43","unstructured":"S. K. Katsikas, D. G. Gritzalis, \u201cThe Need for a Security Policy in Health Care Institutions\u201d, Int. J. of Biomedical Computing, Vol. 35 (Suppl.), 1994, pp 73\u201381."},{"key":"18_CR44","unstructured":"S. K. Katsikas, D. Gritzalis, \u201cHigh Level Security Policy Guidelines\u201d, in Data Security for Health Care, Vols I-III, The SEISMED Consortium (Eds), IOS Press, 1996, pp. 57\u201381 (Vol. I), 164\u2013188 (Vol. II), 53\u201377 (Vol. III)."},{"key":"18_CR45","doi-asserted-by":"crossref","unstructured":"S. K. Katsikas, \u201cHealth Care Management and Information Systems Security: Awareness, Training or Education?\u201d, Int. J. of Medical Informatics, Vol. 60, 2000, pp. 129\u2013135.","DOI":"10.1016\/S1386-5056(00)00112-X"},{"key":"18_CR46","unstructured":"J. Davey, \u201cIT security training\u201d, in: ISHTAR Consortium (Eds.), in The ISHTAR Consortium (Eds.), Implementing Secure Healthcare Telematics Applications in Europe, IOS Press, 2001, pp. 149\u2013166."},{"key":"18_CR47","unstructured":"G. Aggelinos, S. Katsikas, \u201cEnterprise Recovery in Health Care\u201d, in P. Bath, K. Albright, T. Norris (Eds.), Proceedings of the 12th International Symposium on Health Information Management Research - ISHIMR, 2007, pp 63\u201373."},{"key":"18_CR48","unstructured":"ISO\/IEC, \u201cInformation technology\u2013Security techniques\u2014Guidelines for information and communications technology disaster recovery services\u201d, ISO\/IEC 24762:2008."},{"key":"18_CR49","unstructured":"M. Swanson, P. Bowen, A. W. Phillips, D. Gallup, D. Lynes, Contingency Planning Guide for Federal Information Systems, NIST Special Publication 800\u201334 Rev. 1, available at http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-34-rev1\/sp800-34-rev1_errata-Nov11-2010.pdf. Accessed 14 April 2013."},{"key":"18_CR50","unstructured":"ISO\/IEC, \u201cInformation technology\u2014Security techniques\u2014Information security incident management\u201d, ISO\/IEC TR 18044, 2004."},{"key":"18_CR51","doi-asserted-by":"crossref","unstructured":"G. Aggelinos, S. K. Katsikas, \u201cDisaster Recovery Analysis and Management Method (DRAMM): An IT Management tool\u201d, in Proceedings, Panhellenic Conference on Informatics (PCI) 2012, Piraeus, Greece, IEEE Press, 2012.","DOI":"10.1109\/PCi.2012.56"},{"key":"18_CR52","unstructured":"D. Gritzalis, K. Mavroudakis, S. K. Katsikas, \u201cDeveloping a European Computer Security Incident Reporting Service for Health Care\u201d, in The ISHTAR Consortium (Eds.), Implementing Secure Healthcare Telematics Applications in Europe, IOS Press, 2001, pp. 181\u2013248."}],"container-title":["Handbook of Medical and Healthcare Technologies"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-1-4614-8495-0_18","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,30]],"date-time":"2025-04-30T17:58:31Z","timestamp":1746035911000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-1-4614-8495-0_18"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9781461484943","9781461484950"],"references-count":52,"URL":"https:\/\/doi.org\/10.1007\/978-1-4614-8495-0_18","relation":{"is-part-of":[{"id-type":"doi","id":"https:\/\/doi.org\/10.1007\/978-1-4614-8495-0","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2013]]},"assertion":[{"value":"21 November 2013","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}