Segurança da informação e a área da saúde: revisão sistemática da literatura

Abstract

It is understood that information security is a critical problem in recent years regardless of area or business. Regarding the health area, it is related to the greater use of information systems containing patient data and treatments. In this context, we tried to answer the following problem: What are the main information security frameworks used in the health area? The objective of this article is to systematically review articles that address studies on health information security and to identify the main frameworks and focus of information security discussion cited in the literature. We selected articles in English, indexed as of year 2008, from the Web of Science, Scopus and Ebsco bases where some studies on the subject were found. More generic frameworks, such as the ISO / IEC 27001 family, were the most cited and the lowest occurrence of those specific to the health area, such as ISO / IEC 27779 and HIPAA. Thus, there is a possible gap in the discussion of the relevance of information security in the area of health that instigates new studies.