Skip to main content

Research Repository

Advanced Search

Agile incident response (AIR): Improving the incident response process in healthcare

He, Ying; Zamani, Efpraxia D.; Lloyd, Stefan; Luo, Cunjin

Agile incident response (AIR): Improving the incident response process in healthcare Thumbnail


Authors

Ying He

Efpraxia D. Zamani

Stefan Lloyd

Cunjin Luo



Abstract

Recent industrial reports show an increased number of cybersecurity incidents, which inflict significant financial losses. Although organisations have been increasing their investments towards information security, incidents continue to occur. Most organisations adopt traditional linear incident response (IR) frameworks to prevent, detect, contain, eradicate and learn lessons from information security incidents. However, due to their rigidness, such linear frameworks are often ineffective. In this study, inspired by the Agile Manifesto, we propose the Agile IR Framework to refine, adjust, and improve the current linear IR process. We use the IR framework of UK's National Health Service (NHS) as an illustrative case, critically analysing the current linear IR framework and demonstrating how it can be transformed into a hybrid IR framework. Using an illustrative case study from the healthcare domain, this study contributes to the incident response literature by showcasing how the integration of Agile principles in archetypical linear IR processes can improve incident response.

Citation

He, Y., Zamani, E. D., Lloyd, S., & Luo, C. (2022). Agile incident response (AIR): Improving the incident response process in healthcare. International Journal of Information Management, 62, Article 102435. https://doi.org/10.1016/j.ijinfomgt.2021.102435

Journal Article Type Article
Acceptance Date Oct 1, 2021
Online Publication Date Oct 19, 2021
Publication Date Feb 1, 2022
Deposit Date Mar 31, 2022
Publicly Available Date Apr 20, 2023
Journal International Journal of Information Management
Print ISSN 0268-4012
Publisher Elsevier
Peer Reviewed Peer Reviewed
Volume 62
Article Number 102435
DOI https://doi.org/10.1016/j.ijinfomgt.2021.102435
Keywords Library and Information Sciences; Computer Networks and Communications; Information Systems
Public URL https://nottingham-repository.worktribe.com/output/7357795
Publisher URL https://www.sciencedirect.com/science/article/pii/S0268401221001286

Files





Downloadable Citations