Sushma Mishra

Organizational objectives for information security governance: a value focused assessment

Purpose – The purpose of this study is to develop theoretically grounded and empirically derived organizational security governance (OSG) objectives. Developing organizational security governance (OSG) objectives pose significant challenges for organizations considering the ever-increasing vulnerability from lack of or misuse of appropriate controls. In recent years, there have been several cases of colossal losses to businesses due to inadequate security governance measure. In many cases, organizations do not even know as to what their ISG objectives might be. Following an extensive empirical study, this paper proposes 6 fundamental and 17 means objectives for designing security governance. The objectives were developed from individual values of information technology and security executives across a wide range of firms. The study comprised 52 interview respondents across 9 firms, which resulted in 23 OSG objectives. Theoretically, the study was grounded in Catton’s (1959) value theory and Keeney’s (1992...

HIT Considerations: Informatics and Technology Needs and Considerations

In this chapter, we explore and consider many of the technical, data and knowledge issues that impact electronic health records. These issues include healthcare standards and semantic interoperability, security of applications and data, privacy of information, the ability to identify uniquely a participant across all healthcare domains, usability and context based information retrieval, and clinical decision support. These generally applicable informatics issues are then examined with a specific focus on the overall goal of integrating medical and dental health information. Thus, we also examine standards specific to dentistry, the data needs of dentists, and clinical dental decision support efforts.