‘The Way to Be Safe Is Never to Be Secure': Security of ePHI in South African Hospitals

Kabelo Given Chuma and Mpho Ngoepe
Additional contact information
Kabelo Given Chuma: University of South Africa, South Africa
Mpho Ngoepe: University of South Africa, South Africa

International Journal of Information Security and Privacy (IJISP), 2025, vol. 19, issue 1, 1-21

Abstract: Data security is used to protect sensitive and confidential patient health information. The healthcare sector is affected by the myriad of cybersecurity threats and attacks. Safeguarding Electronic Personal Health Information (ePHI) against cybersecurity threats and attacks is important. This study sought to explore the security of ePHI in South African hospitals with a view to proposing a framework. A qualitative study was carried out in public hospitals using semi-structured interviews with purposively selected participants of IT managers, technicians, and network controllers. The findings revealed that South African hospitals suffer from a range of cybersecurity threats, including Trojan viruses, cryptographic attacks, distributed denial of service attacks, phishing emails, password attacks, and malware attacks. The lack of security policies and poor compliance with data protection laws have been recognised as major challenges facing hospitals. The study proposes a security framework that could assist hospitals in securing ePHI by providing a set of guidelines and safeguards.

Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/IJISP.367275 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jisp00:v:19:y:2025:i:1:p:1-21

Access Statistics for this article

International Journal of Information Security and Privacy (IJISP) is currently edited by Yassine Maleh

More articles in International Journal of Information Security and Privacy (IJISP) from IGI Global
Bibliographic data for series maintained by Journal Editor ().