Bibliographic citations
Espinoza, M., Park, I. (2020). Integración del proceso de seguridad de la información con minería de procesos del bloque de cirugía [Trabajo de investigación, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/655928
Espinoza, M., Park, I. Integración del proceso de seguridad de la información con minería de procesos del bloque de cirugía [Trabajo de investigación]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2020. http://hdl.handle.net/10757/655928
@misc{renati/1289965,
title = "Integración del proceso de seguridad de la información con minería de procesos del bloque de cirugía",
author = "Park Cardenas, Ilche Aaron",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2020"
}
In this work, an integrated event protection model is proposed to protect patient information using process mining and data visualization. Therefore, standard 27001 is used as a relationship to detect various types of computer attacks aimed at evaluating data collected in business processes, to improve the management of its information security risks in the medical establishment. The proposed model is based on the application of a set of computer attack analysis tools to increase the level of security of the company's processes. The proposal is made up of 6 phases. 1. Assess risks, 2. Implement controls, 3. Define a treatment plan, 4. Process Mining, 5. Data visualization and 6. Results evaluation. The proposal was validated through a case of a cyber-attack on a medical establishment which did not have adequate controls and contingency plans within its business processes. Preliminary results show that with the support of the instruments of our model, the level of security has increased by 25% with our proposal.
This item is licensed under a Creative Commons License