What question did this study set out to answer?

The aim is to create a framework to minimize cybersecurity risks posed by third-party vendors in healthcare.

April 16, 2026Open Access

An Identity‑Centered Access Risk -Adaptive Access Control Framework for Reducing Third‑Party Vendor Cybersecurity Risk in U.S. Healthcare Systems: A Study Protocol

Key Points

The aim is to create a framework to minimize cybersecurity risks posed by third-party vendors in healthcare.
Develop a layered Vendor Identity and Access Management Platform (VIMP)
Introduce a Continuous Identity Risk Model (CIRisk)
Align protocols with HIPAA and NIST cybersecurity frameworks
Facilitate dynamic authorization and lifecycle governance
Share findings for public dissemination and future evaluation
Proposed an adaptive access control framework to enhance data security
Identified key components to build dynamic risk management strategies
Aligned with existing cybersecurity regulations to ensure compliance
Aimed to facilitate effective governance of vendor access

Abstract

This project presents a study protocol for an identity-centered, risk-adaptive access control framework designed to reduce third-party vendor cybersecurity risk in U.S. healthcare system. The work introduces a layered Vendor Identity and Access Management Platform (VIMP) and a Continuous Identity Risk Model (CIRisk) to support dynamic authorization and lifecycle governance. The protocol is aligned with HIPAA, NIST zero trust and cybersecurity supply chain risk management guidance. This public record is shared to support open dissemination, scholarly visibility, and future prototype evaluation.

Read Full Paperexternally

AIに質問

Bookmark

View Full Paper