Purpose – This paper aims to examine the influence of organization factors on the effectiveness of implementing BS7799, an information security management (ISM) standard.Design/methodology/approach – Based on literature review, a research model was formulated by extracting the antecedents of ISM, and an empirical study was conducted to show how the organizational factors influence organizations in carrying out BS7799.Findings – The study result revealed that there were significant impacts of organizational factors, including IT competence of business managers, environment uncertainty, industry type, and organization size, on the effectiveness of implementing ISM.Research limitations/implications – The sample is limited to the organizational factors in Taiwan. It is suggested to replicate this study in other countries to reconfirm the result before adopting its general implications. Owing to the highly intrusive nature of ISM surveys, a cautious approach with rapport and trust is a key success factor in co...

Organizational factors to the effectiveness of implementing information security management

Incident-centered information security: Managing a strategic balance between prevention and response

The ISO27001:2005, as an information security management system (ISMS), is establishing itself more and more as the security standard in enterprises. In 2008 more than 4457 certified enterprises could be registered worldwide. Nevertheless, the registering an ISMS still says nothing about the quality and performance of its implementation. Therefore, in this article, a method for measuring the performance of the implementation and operation of an ISMS is presented.

Appraisal of the Effectiveness and Efficiency of an Information Security Management System Based on ISO 27001

Around the world, hospitals are faced with both budget and regulatory pressures, forcing them to re-examine the way clinical practice is carried out. Proposed technologies that provide workflow enhancements include Picture Archiving and Communications Systems (PACS); however, is PACS really effective in improving hospital workflow and the flow onto patient care, and how should this be evaluated? An acknowledged and successful approach for organizational evaluation is the Balanced Scorecard (BSC), providing the fundamental features for assessing organizations from various perspectives. In this research, the impact of PACS on the workflow of a large public hospital in Melbourne, Australia, is examined using an adapted version of the BSC. Empirically, this model was applied as an evaluation instrument through a series of in-depth interviews with PACS users. Results show that PACS did improve hospital workflow considerably and that the organizational alignment of PACS in hospitals is an important critical success factor.

/pdf/a-balanced-evaluation-perspective-picture-archiving-and-1oc251dsu2.pdf

A balanced evaluation perspective: Picture archiving and communication system impacts on hospital workflow

https://fuse.franklin.edu/cgi/viewcontent.cgi?article=1033&context=facstaff-pub

A quantitative method for ISO 17799 gap analysis

In picture archiving and communication systems (PACS) [H.K. Huang, PACS: Basic Principles and Application, 1st ed., Wiley-Liss (1998); K.J. Dreyer, A. Mehta, J.H. Thrall, PACS: A Guide to the Digital Revolution, 1st ed., Springer Verlag (2001)], digital image data were stored and retrieved centrally. Clinicians and radiologists have the convenience of instant and simultaneous access to images and reports from multiple locations. In a filmless hospital [E.L. Siegel, R.M. Kolodner, Filmless Radiology, Reprint ed., Springer Verlag (2001)], with the availability of image servers, integrity of data and security of the system were the most important tasks during the design of a PACS. However, there is no single solution for the security of PACS. A comprehensive information security management system (ISMS) is required for the monitoring of the security of PACS. In this paper, the security of PACS is presented as a mechanism by which organization can manage and protect all information assets by ensuring data confidentiality, integrity and accessibility according to ISO17799 and BS7799 standards. Implementation of the ISMS involved system redesign, change of workflow, staff retraining, communication, social engineering and documentation control.

Henry Y. H. Huang

Papers

Implementation of ISO17799 and BS7799 in picture archiving and communication system: local experience in implementation of BS7799 standard