2026-10-06T05:22:15Z https://api.figshare.com/v2/oai

oai:figshare.com:article/33994557 2026-09-25T10:43:19Z category_28909 category_27100 item_type_3 month_year_09_2026

EHR Cybersecurity Framework Evaluation: Keyword Search Outputs and Figures (NIST CSF 2.0, ISO/IEC 27001:2022, HITRUST CSF, NHS DSPT) Kushal Poudel (25108549) Data security and protection Health informatics and information systems cybersecurity electronic health records NHS NIST CSF 2.0 ISO 27001 HITRUST CSF Data Security and Protection Toolkit healthcare cybersecurity threat modelling ransomware FHIR IoMT Insider threat nation state apt campian <p><br></p><p dir="ltr">This dataset contains the keyword search records, data extraction tables and figures from the MSc Cybersecurity dissertation "A Comparative Evaluation of Cybersecurity Governance Frameworks for Electronic Health Record Systems in the UK National Health Service" (Kushal Poudel, University of West London, 2026).</p><p dir="ltr">The study evaluated four frameworks (NIST CSF 2.0, ISO/IEC 27001:2022, HITRUST CSF v11.8.0 and the NHS Data Security and Protection Toolkit) against five EHR-specific threat categories: ransomware, FHIR API exploitation, IoMT vulnerabilities, insider threats and nation-state APT campaigns. The framework documents were searched with a custom Python tool using 56 keywords in eight groups. For each match, the tool recorded the page number, the nearest control reference, the sentence containing the keyword and whether healthcare terms appeared nearby.</p><p dir="ltr">Files:</p><p dir="ltr">13 keyword search records (.txt), one for each framework document: NIST CSF 2.0, ISO 27001, HITRUST CSF and NHS Data Security Standards 1 to 10.</p><p dir="ltr">Appendix_A_Data_Extraction_Table.docx: the data extraction tables from Appendix A of the dissertation.</p><p dir="ltr">Six figures (.png) from Chapter 4: framework coverage by threat category, threat modelling integration, rating distributions by framework and by threat category, GDPR alignment against threat coverage, and threat coverage against threat modelling integration.</p><p dir="ltr">The tool locates evidence only. The Strong, Moderate and Weak ratings in the dissertation were assigned by reading each located passage. The framework documents themselves are not included.</p><h4 dir="ltr">Code: <a href="https://github.com/kushal2019/ehr-cybersecurity-framework-analysis" target="_blank">https://github.com/kushal2019/ehr-cybersecurity-framework-analysis</a></h4><p><br></p><p><br></p> 2026-09-25T10:43:19Z Dataset Dataset 10.6084/m9.figshare.33994557.v1 https://figshare.com/articles/dataset/EHR_Cybersecurity_Framework_Evaluation_Keyword_Search_Outputs_and_Figures_NIST_CSF_2_0_ISO_IEC_27001_2022_HITRUST_CSF_NHS_DSPT_/33994557 CC BY 4.0