Risk management in integrated biomedical engineering preventive maintenance information network

Abstract

It is indicated that automated operations and electronic data are often inadequately protected. One of the major underlying problems is poor designed security management. A principle challenge many authorities face is in identifying and ranking the information security risks to their operations, which is the first step in developing and managing an effective security program. Taking this step helps hospitals identify the most significant risks and determines what actions are appropriate to mitigate them. In this research technological threats that concern the data and processes in an integrated biomedical engineering preventive maintenance network are considered. Correlation of data and processes implies that threats affect both data and the correlating processes. In case report the risk management and analysis process for Erfan hospital in Iran is presented. High level management should follow the presented analysis as a framework to guide the ongoing implementation efforts and evaluate the cost of the project. In addition, service level agreements should incorporate the proposed guidelines and countermeasures. It is clear that the efficient mapping of data and correlated processes is crucial success factor in the implementation of complex integrated network.