Perceived security of BYOD devices in medical institutions. (December 2022)

• Record Type: Journal Article
• Authors: Alexandrou, Alex; Chen, Li-Chiou
• Is Part Of: International journal of medical informatics. Volume 168(2022)
• Publication Date: 2022-12
• Subjects: Mobile devices -- Healthcare settings -- BYOD -- Safeguard cost -- Security controls -- Electronic Medical records (EMR); Medical informatics -- Periodicals; Information science -- Periodicals; Computers -- Periodicals; Medical technology -- Periodicals; Medical Informatics -- Periodicals; Technology, Medical -- Periodicals; Computers; Information science; Medical informatics; Medical technology; Electronic journals; Periodicals; Electronic journals; 610.285
• DOI: 10.1016/j.ijmedinf.2022.104882
• Languages: English
• ISSNs: 1386-5056

Abstract

Highlights: To understand to what extent medical practitioners are familiar with the use of safeguards to counteract security risks (authentication, passwords, malware, loss of devices, Wi-Fi security). This research offers a new perspective toward better understanding of BYOD device security perception in the healthcare industry. It also provides a new approach for this research field by using mixed methods to complement the quantitative results that were produced by a survey. Abstract: Background: Like other computing devices mobile devices have inherent security risks. With today's wider use of mobile devices in medical institutions, particularly the practice of 'bring-your-own-device' (BYOD), the risk of medical data breaches is concerning. Purpose: To investigate security risk perception and safeguard adoption of mobile devices among medical practitioners and IT administrators. Furthermore, to comprehend the perceived costs that practitioners feel these safeguards impose on them. Basic procedures: We conducted both quantitative and qualitative studies investigating whether age, gender and occupation have an impact on the perceived security of patient information and the behavior intentions formed when adopting BYOD. In the quantitative component, a survey was completed by 264 healthcare practitioners from three hospitals and affiliated clinics in New York City. In the qualitative component, we interviewed 36 of 264 subjects from the first study, including twelve physicians, twelve nurses, and twelve IT administrators. All participants had direct experience with BYOD devices. The length of each interview averaged forty-five minutes to an hour. Main findings: We found that physicians have a significantly higher intent to comply with safeguards, compared to nurses. IT administrators prefer an encrypted network connection and Two Factor Authentication (2FA), or a biometric authentication method for accessing Electronic Medical records (EMR). All medical practitioners believe that the biggest threat to the security of medical information is theft or misplacement of the device. Physicians and IT administrators have a better understanding of malware and Wi-Fi threats than nurses. Principal conclusions: This research provides valuable data regarding the healthcare practitioner's safeguard cost, attitudes and intended behaviors regarding the risks and use of mobile devices in healthcare. By understanding a user's perceptions, we can be better aware of how to educate healthcare practitioners, and how to develop policies that will reduce costs and achieve better productivity. We can also see how these processes may be improved by accessing patient information faster and by designing technology more effectively.