A Sociotechnical Approach to Bring-Your-Own-Device Security in Hospitals: Development and Pilot Testing of a Maturity Model Using Mixed Methods Action Research.

ABSTRACT:

Background

Bring your own device (BYOD) adoption in health care improves clinician productivity, but introduces cybersecurity risks due to weak security controls, human error, and policy circumvention. Existing security frameworks and models are technocentric, while overlooking sociotechnical factors such as clinician behavior, workflow integration, and organizational culture. This misalignment reduces their effectiveness in health care settings. In addition, hospitals vary in structure, resources, and BYOD use, necessitating a flexible yet structured approach to assess security maturity and prioritize improvements, which is lacking in existing models.

Objective

This study aims to develop and pilot a hospital BYOD security maturity model that integrates technical, policy, an

SUBMITTER: Wani TA 

PROVIDER: S-EPMC12391842 | biostudies-literature | 2025 Aug

REPOSITORIES: biostudies-literature