Modeling Risk in Distributed Healthcare Information Systems

This paper presents a modeling approach for performing a risk analysis study of networked healthcare information systems. The proposed method is based on CRAMM for studying the assets, threats and vulnerabilities of the distributed information system, and models their interrelationships using Bayesian networks. The most critical events are identified and prioritized, based on "what - if" studies of system operation. The proposed risk analysis framework has been applied to a healthcare information network operating in the North Aegean Region in Greece