How addressing implementation issues can assist in medical information security governance

Research has shown that multiple factors affect the implementation of effective information security in general medical practices. These relate to trust, capability, costs, time, knowledge level, poor implementation, attitude and inconsistencies in objectives. This paper discusses these issues, their affect on medical information security practice and their solutions as part of an information security governance process. At present there are more questions than answers to these issues, however identification of them is the first step to improve security practice in the medical environment.