Privacy and security of electronic patient records – Tailoring multimethodology to explore the socio-political problems associated with Role Based Access Control systems

Adrian Small and David Wainwright

European Journal of Operational Research, 2018, vol. 265, issue 1, 344-360

Abstract: Multimethodologies are now an established area of ‘soft’ operations research (OR). Adopting appropriate OR methods to tackle unstructured and complex problems is a promising field of inquiry and potential application. Research in the areas of energy and utilities, education, UK public services, and healthcare has demonstrated the success of applying multimethodologies to practice. This research focused on the socio-political and socio-cultural issues associated with the specification and design of a Role Based Access Control (RBAC) system as a precursor to the adoption of an electronic health and patient record system in an English National Health Service (NHS) hospital Trust. Although being a local hospital Trust initiative, there were many complex requirements and constraints from UK NHS policies, strategies and standards, as well as from government contracted IT company vendors, consultancy companies and software consortia (termed Local Service Providers). This research develops a multimethodology, using SSM in combination with process modelling and technology management (referred to as TMSSMXL), in order to tailor problem structuring methods to a healthcare hospital context. The research concludes that by adopting methods that are compatible with an organization's culture, stakeholder perspectives and professional working, a suitable mix of OR methods may be combined and deployed that can enable, and enhance, stakeholders’ knowledge and learning about the unforeseen organizational consequences of complex technology introduction. It is argued that this leads to more effective technology systems requirements definition and greater project implementation success.

Keywords: Problem structuring; Multimethodologies; Role Based Access Control; Soft operational research; Electronic Health Records (search for similar items in EconPapers)
Date: 2018
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (5)

Downloads: (external link)
http://www.sciencedirect.com/science/article/pii/S0377221717306689
Full text for ScienceDirect subscribers only

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eee:ejores:v:265:y:2018:i:1:p:344-360

DOI: 10.1016/j.ejor.2017.07.041

Access Statistics for this article

European Journal of Operational Research is currently edited by Roman Slowinski, Jesus Artalejo, Jean-Charles. Billaut, Robert Dyson and Lorenzo Peccati

More articles in European Journal of Operational Research from Elsevier
Bibliographic data for series maintained by Catherine Liu ().