{"id":"https://openalex.org/W3158363812","doi":"https://doi.org/10.1109/healthcom49281.2021.9399039","title":"Risk Analysis Based Security Compliance Assessment and Management for Sensitive Health Data Environment","display_name":"Risk Analysis Based Security Compliance Assessment and Management for Sensitive Health Data Environment","publication_year":2021,"publication_date":"2021-03-01","ids":{"openalex":"https://openalex.org/W3158363812","doi":"https://doi.org/10.1109/healthcom49281.2021.9399039","mag":"3158363812"},"language":"en","primary_location":{"id":"doi:10.1109/healthcom49281.2021.9399039","is_oa":false,"landing_page_url":"https://doi.org/10.1109/healthcom49281.2021.9399039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on E-health Networking, Application & Services (HEALTHCOM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079099671","display_name":"Umar Ozeer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Umar Ozeer","raw_affiliation_strings":["EURIS Cloud Sant\u00e9, Boulogne, Billancourt, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EURIS Cloud Sant\u00e9, Boulogne, Billancourt, France","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037217358","display_name":"Badara Pouye","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114740","display_name":"Asur Plant Breeding (France)","ror":"https://ror.org/029b48872","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210114740"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Badara Pouye","raw_affiliation_strings":["Nuagerance SAS, Saint-Denis, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nuagerance SAS, Saint-Denis, France","institution_ids":["https://openalex.org/I4210114740"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.338,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.46095674,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6069169044494629},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5918303728103638},{"id":"https://openalex.org/keywords/security-management","display_name":"Security management","score":0.5492333769798279},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5310934782028198},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.5309873223304749},{"id":"https://openalex.org/keywords/government","display_name":"Government (linguistics)","score":0.49670058488845825},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.48555752635002136},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.47268205881118774},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.4640701413154602},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4486435353755951},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.4350683093070984},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.4226140081882477},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4187663197517395},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.4136161506175995},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.3335886597633362},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.33187931776046753},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.16006514430046082}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6069169044494629},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5918303728103638},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.5492333769798279},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5310934782028198},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.5309873223304749},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.49670058488845825},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.48555752635002136},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.47268205881118774},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.4640701413154602},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4486435353755951},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.4350683093070984},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4226140081882477},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4187663197517395},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.4136161506175995},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.3335886597633362},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.33187931776046753},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.16006514430046082},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/healthcom49281.2021.9399039","is_oa":false,"landing_page_url":"https://doi.org/10.1109/healthcom49281.2021.9399039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE International Conference on E-health Networking, Application & Services (HEALTHCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1577844105","https://openalex.org/W1847381862","https://openalex.org/W1964782951","https://openalex.org/W2001108525","https://openalex.org/W2084312114","https://openalex.org/W2099916166","https://openalex.org/W2107811435","https://openalex.org/W2165529641","https://openalex.org/W2238332334","https://openalex.org/W2470158437","https://openalex.org/W2587393952","https://openalex.org/W2736368095"],"related_works":["https://openalex.org/W2120971814","https://openalex.org/W2033357182","https://openalex.org/W4310892428","https://openalex.org/W4232424383","https://openalex.org/W2303053547","https://openalex.org/W2777401565","https://openalex.org/W322391649","https://openalex.org/W4313041944","https://openalex.org/W3123267782","https://openalex.org/W1502752702"],"abstract_inverted_index":{"The":[0,142],"digitisation":[1],"of":[2,21,29,38,92,108,111,144,154,166],"personal":[3],"health":[4,9,63,93],"information":[5],"(PHI)":[6],"through":[7],"electronic":[8],"record":[10],"(EHR)":[11],"has":[12],"become":[13],"widespread":[14],"due":[15],"to":[16,44,49,60,97,104,123,168],"their":[17,52],"efficiency":[18],"in":[19,131],"terms":[20],"cost,":[22],"storage,":[23],"processing,":[24],"and":[25,69,88,116,135,162],"the":[26,90,106,119,145,151],"subsequent":[27],"quality":[28],"delivering":[30],"patient":[31],"care.":[32],"However,":[33],"security":[34,55,99,109,152],"concerns":[35],"remain":[36],"one":[37],"its":[39],"major":[40],"setback.":[41],"In":[42],"order":[43],"handle":[45],"EHR,":[46],"institutions":[47],"need":[48],"comply":[50],"with":[51,95,158],"local":[53],"government":[54],"regulations.":[56,100],"These":[57],"regulations":[58],"control":[59],"which":[61],"extent":[62],"data":[64],"can":[65],"be":[66],"processed,":[67],"transmitted,":[68],"stored":[70],"as":[71,73],"well":[72],"define":[74],"how":[75],"misuses":[76],"are":[77],"addressed.":[78],"This":[79],"paper":[80],"proposes":[81],"\u03c6comp,":[82],"a":[83,125,138],"solution":[84],"for":[85],"monitoring,":[86],"assessing,":[87],"evaluating":[89],"compliance":[91,153],"applications":[94,157],"respect":[96],"defined":[98],"\u03c6comp":[101,128],"is":[102],"able":[103],"assess":[105],"level":[107],"risk":[110,167],"an":[112,132],"application":[113],"at":[114],"runtime":[115],"automatically":[117],"perform":[118],"required":[120],"mitigation":[121],"actions":[122],"recover":[124],"compliant":[126],"environment.":[127],"was":[129],"implemented":[130],"industrial":[133],"context":[134],"evaluated":[136],"on":[137],"medical":[139],"appointment":[140],"application.":[141],"results":[143],"experiments":[146],"showed":[147],"that":[148],"it":[149],"manages":[150],"third":[155],"party":[156],"low":[159],"performance":[160],"overhead":[161],"attenuate":[163],"unacceptable":[164],"levels":[165],"restore":[169],"compliance.":[170]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}