HIPAA Security and Privacy Rules Auditing in Extreme Programming Environments

Mahmood Alsaadi, Malik Qasaimeh, Sara Tedmori and Khaled Almakadmeh
Additional contact information
Mahmood Alsaadi: Department of Computer Science, Princess Sumaya University for Technology, Amman, Jordan
Malik Qasaimeh: Department of Software Engineering, Princess Sumaya University for Technology, Amman, Jordan
Sara Tedmori: Department of Computer Science, Princess Sumaya University for Technology, Amman, Jordan
Khaled Almakadmeh: Department of Software Engineering, Hashemite University, Zarqa, Jordan

International Journal of Information Systems in the Service Sector (IJISSS), 2017, vol. 9, issue 1, 1-21

Abstract: Healthcare business is responsible of keeping patient data safe and secure by following the rules of the federal Health Insurance Portability and Accountability Act of 1996, (HIPAA). Agile software organizations that deal with healthcare software system face a number of challenges to demonstrate that their process activities conform to the rules of HIPAA. Such organizations must establish a software process life cycle and develop procedures, tools, and methodologies that can manage the HIPAA requirements during the different stages of system development, and also must provide evidences of HIPAA conformity. This paper proposes an auditing model for HIPAA security and privacy rules in XP environments. The design of the proposed model is based on an evaluation theory which takes as its input the work of Lopez ATAM, and the standards of common criteria (CC) concepts. The proposed auditing model has been assessed based on four case studies. The auditing result shows that the proposed model is capable of capturing the auditing evidences in most of the selected case studies.

Date: 2017
References: Add references at CitEc
Citations:

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve. ... 18/IJISSS.2017010101 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jisss0:v:9:y:2017:i:1:p:1-21

Access Statistics for this article

International Journal of Information Systems in the Service Sector (IJISSS) is currently edited by John Wang

More articles in International Journal of Information Systems in the Service Sector (IJISSS) from IGI Global
Bibliographic data for series maintained by Journal Editor ().