影響醫院雲端導向電子病歷交換之 資訊安全因素:整合技術、組織與個人觀點

The Impact of Cloud-Oriented Hospital EHR Exchange of Information Security Integration Factors: Technical,Organizational and Personal Opinions

黃堃嘉(kun-jia Huang)

指導教授 ： 吳英隆

國立中正大學/管理學院/資訊管理系醫療資訊管理研究所/碩士(2015年)

摘要

病歷的雲端化將為醫療機構節省許多的人力與金錢，並且加速醫院之間資的交換，達到醫療資源的共享。
但其中在「醫療雲」的個人病歷隱私的問題，由於醫院及其醫療環境的工作流程非常複雜，部分工作人員經授權後皆可進入電子病歷的資料庫，因此網路的安全性與醫療業最重視的個人隱私將會是最注重的議題，資料的隱私更是網路上重要的焦點，例如病歷存取權限的控管、傳輸時資訊的安全性等。
本研究整合技術、組織與個人觀點來瞭解醫院雲端導向電子病歷交換之資訊安全因素，在技術構面上，本研究認為「雲端運算」服務的採用，將有效降低電子病歷交換頻率在技術面上與成本面上的阻礙，但推行電子病歷也勢必會碰到資訊安全相關問題。在組織構面部分，「醫院規模」大小或層級，以及「高階主管支持」的參與與鼓勵都會影響到醫院內對於遵守資訊安全意向的意願。在個人構面上以「組織公民行為」做為醫院內部個人自我遵守資訊安全意向之意願。
本研究對象為國內醫院的資訊人員與行政人員，採用網路寄信或網路問卷發放問卷，共發放252份，回收約90份，剔除7份無效問卷，實際有效問卷為83份，故有效問卷回收率為33%，使用SPSS20統計軟體，對83份有效問卷進行基本資料分析，包括填答者基本資料以及醫院基本資料兩部分進行分析。研究結果顯示在技術構面上雲端服務的採用會正向影響電子病歷交換頻率;在組織構面中，高階主管支持會正向影響遵守資訊安全意向之意願，規模大小會正向影響遵守資訊安全意向之意願；個人構面中組織公民行為會正向影響遵守資訊安全意向之意願；最後，電子病歷交換頻率會正向影響遵守資訊安全意向之意願。

關鍵字

組織公民行為 ； 雲端運算 ； 電子病歷交換 ； 資訊安全 ； 雲端服務

並列摘要

The cloud-based medical records will save a lot of manpower and organization money and accelerate the exchange of resources between hospitals, to share medical resources.
But in "medical cloud" personal medical privacy issues, due to the workflow hospital and medical environment is very complex, part of the staff was authorized to enter EHR repositories, so network security and medical industry the most important privacy issues will be the most focused, information privacy is more important to focus on the Internet, such as medical records access Control Manager, and the transmission of information security, and so on.
In this study, the integration of technical, organizational and personal point of view to understand the hospital cloud-oriented IT security considerations exchange of electronic medical records, in the technical structure surface, this study suggests that "cloud computing" services adoption, will effectively reduce the exchange of electronic medical records and in the technical side hinder cost surface, but the implementation of electronic medical records is also bound to encounter issues related to information security. However, the implementation of electronic medical records is also bound to encounter issues related to information security. Facets part in the organization, "hospital size" size or level, as well as "support executives' involvement and encouragement will affect the hospital to comply with the wishes of information security.
This study is the domestic IT personnel and administrative staff of the hospital, using the Internet to send a letter or online questionnaire questionnaires were distributed and 252 were returned to about 90 parts, excluding the seven invalid questionnaires, the real effective questionnaires to 83, it effectively The response rate was 33%, the use of statistical software SPSS20, valid for 83 volumes of basic data analysis, including those respondents had basic information as well as basic information on two parts of the hospital were analyzed. The results show that the use of cloud services in the technical structure of the surface will positively affect the exchange of electronic medical records frequency; facets of the organization, executives support will positively affect the intention to comply with the wishes of information security, size will positively affect compliance with information security the intention of the will; individual facets of organizational citizenship behavior will positively affect the intention to comply with the wishes of information security; Finally, EHR exchange frequency will forward the intention of affecting willingness to comply with information security.

並列關鍵字

information security ； organizational citizenship behavior ； cloud computing ； electronic medical records exchange ； cloud services

參考文獻

洪新原, 張碩毅, & 郭吉原. (2011). 影響組織採行與應用資訊安全管理系統認證之關鍵因素. 電腦稽核, (23), 99-112.

蔡一郎. (2010). 雲端運算與雲端安全架構. 資訊安全通訊, 16(4), 84-93.

樊國楨, 黃健誠, & 林樹國. (2010). 資訊安全管理系統標準化之實然應然問題探微: 根基於 [推動資訊與資訊系統分類分級] 行動方案. 資訊安全通訊, 16(4), 1-31.

梁日誠, & 陳昇智. (2011). ISO 27799 醫療資訊安全管理與 ISO 27000 系列國際標準簡介. 資訊安全通訊, 17(3), 98-107.

黃興進、呂卓勳、蕭如玲、陳瑞甫 (2009)，「影響電子病歷交換效益關鍵因素之研究：醫師觀點」，電子商務學報，第11卷，第1期，pp95-118。