A RISK-BASED DATA PROTECTION MODEL FOR HEALTHCARE ORGANIZA-TIONS

Abstract This article examines the challenge of ensuring the protection of medical data in healthcare organizations in the context of digitalization and the growth of processed medical information (information processed in medical information systems). It is worth noting that traditional approaches to information security do not fully account for the specifics of medical data and the dynamics of information security threats. The paper proposes a model for assessing and managing medical data security risks that takes into account the characteristics of the data being processed, its processing environment, its intended use, the security mechanisms applied, existing security services, current threats, and potential losses.