{"id":"https://openalex.org/W2520899321","doi":"https://doi.org/10.4018/ijisss.2017010101","title":"HIPAA Security and Privacy Rules Auditing in Extreme Programming Environments","display_name":"HIPAA Security and Privacy Rules Auditing in Extreme Programming Environments","publication_year":2016,"publication_date":"2016-09-12","ids":{"openalex":"https://openalex.org/W2520899321","doi":"https://doi.org/10.4018/ijisss.2017010101","mag":"2520899321"},"language":"en","primary_location":{"id":"doi:10.4018/ijisss.2017010101","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijisss.2017010101","pdf_url":null,"source":{"id":"https://openalex.org/S160826262","display_name":"International Journal of Information Systems in the Service Sector","issn_l":"1935-5688","issn":["1935-5688","1935-5696"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Systems in the Service Sector","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037362119","display_name":"Mahmood Alsaadi","orcid":"https://orcid.org/0000-0002-7908-2082"},"institutions":[{"id":"https://openalex.org/I158749337","display_name":"Princess Sumaya University for Technology","ror":"https://ror.org/01jy46q10","country_code":"JO","type":"education","lineage":["https://openalex.org/I158749337"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Mahmood Alsaadi","raw_affiliation_strings":["Department of Computer Science, Princess Sumaya University for Technology, Amman, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Princess Sumaya University for Technology, Amman, Jordan","institution_ids":["https://openalex.org/I158749337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080846698","display_name":"Malik Qasaimeh","orcid":"https://orcid.org/0000-0003-1303-4501"},"institutions":[{"id":"https://openalex.org/I158749337","display_name":"Princess Sumaya University for Technology","ror":"https://ror.org/01jy46q10","country_code":"JO","type":"education","lineage":["https://openalex.org/I158749337"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Malik Qasaimeh","raw_affiliation_strings":["Department of Software Engineering, Princess Sumaya University for Technology, Amman, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Princess Sumaya University for Technology, Amman, Jordan","institution_ids":["https://openalex.org/I158749337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030191413","display_name":"Sara Tedmori","orcid":"https://orcid.org/0000-0002-0391-0160"},"institutions":[{"id":"https://openalex.org/I158749337","display_name":"Princess Sumaya University for Technology","ror":"https://ror.org/01jy46q10","country_code":"JO","type":"education","lineage":["https://openalex.org/I158749337"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Sara Tedmori","raw_affiliation_strings":["Department of Computer Science, Princess Sumaya University for Technology, Amman, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Princess Sumaya University for Technology, Amman, Jordan","institution_ids":["https://openalex.org/I158749337"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080755265","display_name":"Khaled Almakadmeh","orcid":"https://orcid.org/0000-0001-5811-1975"},"institutions":[{"id":"https://openalex.org/I157392197","display_name":"Hashemite University","ror":"https://ror.org/04a1r5z94","country_code":"JO","type":"education","lineage":["https://openalex.org/I157392197"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Khaled Almakadmeh","raw_affiliation_strings":["Department of Software Engineering, Hashemite University, Zarqa, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Hashemite University, Zarqa, Jordan","institution_ids":["https://openalex.org/I157392197"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7065,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.92133687,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"9","issue":"1","first_page":"1","last_page":"21"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/health-insurance-portability-and-accountability-act","display_name":"Health Insurance Portability and Accountability Act","score":0.7884488105773926},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6211641430854797},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5389888882637024},{"id":"https://openalex.org/keywords/extreme-programming","display_name":"Extreme programming","score":0.47773975133895874},{"id":"https://openalex.org/keywords/agile-software-development","display_name":"Agile software development","score":0.4741087555885315},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.45812734961509705},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4244970381259918},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.3954392075538635},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.39051058888435364},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.3643050193786621},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3523353934288025},{"id":"https://openalex.org/keywords/software-development-process","display_name":"Software development process","score":0.3445308804512024},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.32249078154563904},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.28473585844039917},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.2754461169242859},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.18498194217681885}],"concepts":[{"id":"https://openalex.org/C2778306010","wikidata":"https://www.wikidata.org/wiki/Q606563","display_name":"Health Insurance Portability and Accountability Act","level":3,"score":0.7884488105773926},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6211641430854797},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5389888882637024},{"id":"https://openalex.org/C122944926","wikidata":"https://www.wikidata.org/wiki/Q209711","display_name":"Extreme programming","level":5,"score":0.47773975133895874},{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.4741087555885315},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45812734961509705},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4244970381259918},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3954392075538635},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.39051058888435364},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3643050193786621},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3523353934288025},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.3445308804512024},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.32249078154563904},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.28473585844039917},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2754461169242859},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.18498194217681885},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.4018/ijisss.2017010101","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijisss.2017010101","pdf_url":null,"source":{"id":"https://openalex.org/S160826262","display_name":"International Journal of Information Systems in the Service Sector","issn_l":"1935-5688","issn":["1935-5688","1935-5696"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Systems in the Service Sector","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:igg:jisss0:v:9:y:2017:i:1:p:1-21","is_oa":false,"landing_page_url":"https://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/IJISSS.2017010101","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5199999809265137,"id":"https://metadata.un.org/sdg/12","display_name":"Responsible consumption and production"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W160969032","https://openalex.org/W317509537","https://openalex.org/W1495479466","https://openalex.org/W1499414128","https://openalex.org/W1537811214","https://openalex.org/W1546884423","https://openalex.org/W1839915801","https://openalex.org/W1991310584","https://openalex.org/W2023334188","https://openalex.org/W2053210915","https://openalex.org/W2054942051","https://openalex.org/W2065732700","https://openalex.org/W2065949211","https://openalex.org/W2102961782","https://openalex.org/W2113848838","https://openalex.org/W2115255130","https://openalex.org/W2121016257","https://openalex.org/W2126165341","https://openalex.org/W2151867910","https://openalex.org/W2282813435"],"related_works":["https://openalex.org/W2254063053","https://openalex.org/W2139627947","https://openalex.org/W1490906646","https://openalex.org/W2478402987","https://openalex.org/W2071764545","https://openalex.org/W2169699977","https://openalex.org/W2006602523","https://openalex.org/W2083548394","https://openalex.org/W158530238","https://openalex.org/W1599061894"],"abstract_inverted_index":{"Healthcare":[0],"business":[1],"is":[2,110,154],"responsible":[3],"of":[4,15,24,39,51,78,86,106,123,129,156,163],"keeping":[5],"patient":[6],"data":[7],"safe":[8],"and":[9,21,62,66,81,98,126],"secure":[10],"by":[11],"following":[12],"the":[13,16,49,71,75,107,121,127,151,158,164],"rules":[14,50,100],"federal":[17],"Health":[18],"Insurance":[19],"Portability":[20],"Accountability":[22],"Act":[23],"1996,":[25],"(HIPAA).":[26],"Agile":[27],"software":[28,34,58],"organizations":[29,54],"that":[30,43,68,150],"deal":[31],"with":[32],"healthcare":[33],"system":[35,79],"face":[36],"a":[37,57],"number":[38],"challenges":[40],"to":[41,48],"demonstrate":[42],"their":[44],"process":[45,59],"activities":[46],"conform":[47],"HIPAA.":[52],"Such":[53],"must":[55,83],"establish":[56],"life":[60],"cycle":[61],"develop":[63],"procedures,":[64],"tools,":[65],"methodologies":[67],"can":[69],"manage":[70],"HIPAA":[72,87,96],"requirements":[73],"during":[74],"different":[76],"stages":[77],"development,":[80],"also":[82],"provide":[84],"evidences":[85,160],"conformity.":[88],"This":[89],"paper":[90],"proposes":[91],"an":[92,113],"auditing":[93,136,147,159],"model":[94,109,137,153],"for":[95],"security":[97],"privacy":[99],"in":[101,161],"XP":[102],"environments.":[103],"The":[104,134,146],"design":[105],"proposed":[108,135,152],"based":[111,141],"on":[112,142],"evaluation":[114],"theory":[115],"which":[116],"takes":[117],"as":[118],"its":[119],"input":[120],"work":[122],"Lopez":[124],"ATAM,":[125],"standards":[128],"common":[130],"criteria":[131],"(CC)":[132],"concepts.":[133],"has":[138],"been":[139],"assessed":[140],"four":[143],"case":[144,166],"studies.":[145,167],"result":[148],"shows":[149],"capable":[155],"capturing":[157],"most":[162],"selected":[165]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1}],"updated_date":"2026-06-11T06:19:23.411458","created_date":"2025-10-10T00:00:00"}