Analysing Security in Information Systems

The last few years there is a tendency to integrate security issues during the development of information systems with the aim to develop more secure information systems. In this paper we propose an analysis, based on the measures of criticality (how critical a component of the system is) and complexity (represents the effort required by the components of the system to achieve the requirements that have been imposed to them), which aims to identify possible bottlenecks of an information system with respect to security. An integrated health and social care information system is used as a case study throughout this paper