Health Records on the Cloud: A Security Framework

The current study investigates the process of selecting a cloud service provider for implementing an electronic health record (EHR) system on the cloud from a security standpoint. This is an important issue because many eligible physicians still do not use EHRs and thus cannot meet the meaningful use criteria and receive incentives provided by the Centers for the Medicare and Medicaid Services (CMS). To facilitate the process of selecting a cloud provider, we propose a framework focusing on the security issues related to implementing EHR systems on the cloud. The framework targets evaluators from healthcare practitioners and is designed to be a comprehensive tool for improving decisionmaking. The current study contributes to the literature as it utilizes design science methods to healthcare information systems and provides an overview of the current state of EHR, cloud computing, and security. The study also discusses many practical implications and recommendations for healthcare.