Exploring the value conflicts and supports of information security compliance in nursing practices : A case-study in the Hospital of Southern Norway (SSHF) Kristiansand
MetadataShow full item record
Original versionJordalen, K. H. & Larsen, T. S. (2020) Exploring the value conflicts and supports of information security compliance in nursing practices : A case-study in the Hospital of Southern Norway (SSHF) Kristiansand (Master's thesis). University of Agder, Kristiansand.
Background: Information and information systems are a vital resource for an organiza-tion. Data breaches cannot be prevented by technical measures alone, that is why this thesis looks at the human elementin the search for understanding compliancewith se-curity policies. Thecontext is the hospital sectorwith the aim ofunderstanding theac-tual behavior of employees and the divergence of convergence withprescribed policies. Theoretical lens:The study adopts the lens of Value-Based Compliancetheory,which has its roots in the health caresector. This theory describes information security actions as 1) prescribed(the written policies), and2) actual(the actual behavior of employees) and looks for goals and values associated withprescribed and actual information secu-rity actionsto identify potentialconflicts. Method:This thesisfollows aqualitative approachthrough a case study of SSHF Kris-tiansand with interviews and documentsas the data sources. The interview data are col-lected from fifteen interviewees: nurses, unit leaders, and information security workers. The data analysis is performed following thevalue-basedcompliance method. This method is a development of the value-based compliance theory.
Master's thesis in Information systems (IS501)