Accountability in organizations

Accountability is an important requirement in computer and information security but it is an ambiguous concept which is open to multiple interpretations. Most of the work in accountability from computer security research only focus on the association between an action with the user who has performed the action. However, it is not sufficient for handling accountability in organisations (e.g., healthcare environment). In this paper, we clarify the meaning of accountability in organisations. We also propose a framework to support the variety of accountability requirements for different applications in different organisations