{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,17]],"date-time":"2025-05-17T04:04:30Z","timestamp":1747454670903,"version":"3.40.5"},"reference-count":0,"publisher":"IOS Press","isbn-type":[{"value":"9781643685960","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,5,15]],"date-time":"2025-05-15T00:00:00Z","timestamp":1747267200000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,5,15]]},"abstract":"<jats:p>The digitalization of healthcare requires robust information security and data protection measures. This work outlines a methodology for assessing these aspects using the Technical Guideline TR-03161-2 from the German Federal Office for Information Security (BSI). The approach involves comparing the current information security and data protection state of a healthcare web application against predefined requirements and identifying threats based on unmet criteria. Identified security deficits are quantified in economic cost terms through use of the Annualized Loss Expectancy (ALE) framework, providing a realistic assessment of the economic impact of information security and data protection risks.<\/jats:p>","DOI":"10.3233\/shti250447","type":"book-chapter","created":{"date-parts":[[2025,5,16]],"date-time":"2025-05-16T08:57:12Z","timestamp":1747385832000},"source":"Crossref","is-referenced-by-count":0,"title":["Measuring the State of Information Security and Data Protection in Healthcare Web Applications"],"prefix":"10.3233","author":[{"given":"Julian","family":"Schallenberg","sequence":"first","affiliation":[{"name":"Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany"},{"name":"Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Romina","family":"Blasini","sequence":"additional","affiliation":[{"name":"Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Keywan","family":"Sohrabi","sequence":"additional","affiliation":[{"name":"Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Florian","family":"Eberhardt","sequence":"additional","affiliation":[{"name":"Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany"},{"name":"Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"7437","container-title":["Studies in Health Technology and Informatics","Intelligent Health Systems \u2013 From Technology to Data and Knowledge"],"original-title":[],"link":[{"URL":"https:\/\/ebooks.iospress.nl\/pdf\/doi\/10.3233\/SHTI250447","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,16]],"date-time":"2025-05-16T08:57:12Z","timestamp":1747385832000},"score":1,"resource":{"primary":{"URL":"https:\/\/ebooks.iospress.nl\/doi\/10.3233\/SHTI250447"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5,15]]},"ISBN":["9781643685960"],"references-count":0,"URL":"https:\/\/doi.org\/10.3233\/shti250447","relation":{},"ISSN":["0926-9630","1879-8365"],"issn-type":[{"value":"0926-9630","type":"print"},{"value":"1879-8365","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,5,15]]}}}