Regulatory compliance and security in healthcare cloud migration
Year: 2025
Type: article
Abstract: This article presents a comprehensive analysis of regulatory compliance and security challenges in healthcare cloud migration, introducing an Integrated Compliance and Security Framework (ICSF) to address these complex requirements. The article synthesizes current literature with empirical evidence from healthcare organizations to identify effective strategies for protecting sensitive patient information while maintaining HIPAA compliance throughout the migration lifecycle. Examining the evolution of cloud computing in healthcare, regulatory requirements with a particular focus on HIPAA compliance, and security architectures across pre-migration, implementation, and post-migration phases, the article identifies critical success factors and common pitfalls in cloud adoption. The article integrates governance structures, risk management methodologies, technical controls, operational management, and continuous improvement mechanisms to create a cohesive approach for healthcare organizations. The article reveals that successful implementations share characteristics including comprehensive pre-migration security assessment, clear delineation of responsibilities, phased implementation approaches, and formal validation procedures. This article contributes to both scholarly understanding and practical implementation of secure, HIPAA-compliant cloud environments in healthcare, addressing a significant gap between technological capabilities and regulatory requirements in an increasingly cloud-dependent healthcare ecosystem.
Author: Surabhi, Praveen Kumar
Institution: Jawaharlal Nehru Technological University, Hyderabad
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7086772645
FWCI:
Cites:
Cited by:
Related to: