MEANINGFUL HEALTHCARE SECURITY: DOES MEANINGFUL-USE ATTESTATION IMPROVE INFORMATION SECURITY PERFORMANCE?

• 成果类型: Article
• 署名作者: Kwon, Juhee; Johnson, M. Eric
• 署名单位: City University of Hong Kong; Vanderbilt University
• 刊物名称: MIS QUARTERLY
• ISSN/ISSBN: 0276-7783
• DOI: 10.25300/MISQ/2018/13580
• 发表日期: 2018
• 页码: 1043-+
• 关键词: iso-9000 certification; financial performance; QUALITY MANAGEMENT; technology diffusion; global diffusion; record systems; market value; IMPACT; adoption; FIRMS

摘要

Certification mechanisms are often employed to assess and signal difficult-to-observe management practices and foster improvement. In the U.S. healthcare sector, a certification mechanism called meaningful-use attestation was recently adopted as part of an effort to encourage electronic health record (EHR) adoption while also focusing healthcare providers on protecting sensitive healthcare data. This new regime motivated us to examine how meaningful-use attestation influences the occurrence of data breaches. Using a propensity score matching technique combined with a difference-in-differences (DID) approach, our study shows that the impact of meaningful-use attestation is contingent on the nature of data breaches and the time frame. Hospitals that attest to having reached Stage 1 meaningful-use standards observe fewer external breaches in the short term, but do not see continued improvement in the following year. On the other hand, attesting hospitals observe short-term increases in accidental internal breaches but eventually see long-term reductions. We do not find any link between malicious internal breaches and attestation. Our findings offer theoretical and practical insights into the effective design of certification mechanisms.