ESTUDIO DE LA SEGURIDAD DE LA INFORMACIÓN DE LOS PACIENTES EN LOS HOSPITALES PÚBLICOS TIPO II DE ECUADOR.

Abstract

Information is a very important asset for most organizations or companies. In the health sector, the information handled is highly sensitive because it contains detailed information on patients about their socioeconomic status, analyzes, diagnoses and medical treatments that are taken for these health centers. It is essential that these institutions consider the security of information as the primary axis for good management and information management, this is because currently filtering, alteration or theft of data is a latent problem that may affect the information systems that they are managed in these environments. Cybersecurity in public hospitals must be in accordance with clear information assurance policies to defend against any type of threats that are increasingly more advanced. This paper studies the current situation of patient information security in type II public hospitals in Ecuador, establishing a methodology for analyzing HIPAA, Regulation 2016/679 and ISO 27799, and establishing evaluation groups in each of the health entities chosen, which are governed by standards and ministerial agreements issued by the Ministry of Public Health of Ecuador, which are general in the area of information security. Finally, guidelines for the security of patient information are defined as an essential component for the adequate treatment of patient information. The result of this study clearly demonstrates the shortcomings in the assurance of patient information despite the efforts made, thus making a process of continuous improvement.