Proactive Versus Reactive Security Investments in the Healthcare Sector
Proactive Versus Reactive Security Investments in the Healthcare Sector
复制标题
医疗保健行业的主动安全投资与被动安全投资
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
M. E. Johnson
中科院分区：
文献类型：
--
作者：
Juhee Kwon;M. E. Johnson
本研究确定了因以往失败或外部监管压力而产生的安全投资的影响。基于组织学习理论，本研究聚焦于医疗保健行业，该行业的法规要求披露违规行为，并且有关于安全投资的详细数据。利用考克斯比例风险模型，我们证明了主动的安全投资与较低的安全失败率相关。将这一结果与违规披露的经济学原理相结合，我们还表明，在医疗保健安全方面，主动投资比被动投资更具成本效益。我们的研究结果进一步表明，这种效应在州一级被放大，支持了安全投资产生正外部性的观点。我们还发现，外部压力会降低主动投资对安全绩效的影响。这意味着自愿进行的主动投资比非自愿进行的投资更具影响力。我们的研究结果表明，安全管理人员和政策制定者应关注影响安全投资决策的战略和监管因素。
This study identifies the effects of security investments that arise from previous failures or external regulatory pressure. Building on organizational learning theory, the study focuses on the healthcare sector where legislation mandates breach disclosure and detailed data on security investments are available. Using a Cox proportional hazard model, we demonstrate that proactive security investments are associated with lower security failure rates. Coupling that result with the economics of breach disclosure, we also show that proactive investments are more cost effective in healthcare security than reactive investments. Our results further indicate that this effect is amplified at the state level, supporting the argument that security investments create positive externalities. We also find that external pressure decreases the effect of proactive investments on security performance. This implies that proactive investments, voluntarily made, have more impact than those involuntarily made. Our findings suggest that security managers and policy makers should pay attention to the strategic and regulatory factors influencing security investment decisions.