An IT Audit Framework for Quality, Security, and Compliance in Integrated Biomedical Imaging Systems: A Case Study in a SaudiArabian Clinical Environment


Authors : Hazel Galas Lampitoc; Dr. Reagan Recafort

Volume/Issue : Volume 11 - 2026, Issue 2 - February


Google Scholar : https://tinyurl.com/mdd5etkt

Scribd : https://tinyurl.com/mw9f3btn

DOI : https://doi.org/10.38124/ijisrt/26feb554

Note : A published paper may take 4-5 working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and ResearchGate.


Abstract : Biomedical imaging systems have proven to be relevant for current clinical practice; on the other hand, increasing complexity has resulted in substantial challenges in system quality, cybersecurity, and regulatory compliance. This study examines these challenges in a Saudi Arabian clinical context, in addition to presenting an IT audit framework for integrated imaging systems. The study, underpinning its methodological approach, using General Systems Theory (GST), used a qualitative case study design with semi-structured interviews, document reviews, and non-intrusive observations. Thematic analysis yielded four major issues identified: challenges to the quality/performance of the system, security risks and vulnerabilities involved, compliance deficiencies and inconsistencies between different components, and the interdependency between imaging subsystems. Here we highlight a few limitations of traditional IT audit methodologies, which are still unable to cope with imaging-specific operational and technical realities. Consistent with this demand, the IT audit framework proposed by this study refers to those four core dimensions: quality assessment, security evaluation, compliance verification, and subsystem interdependency. It provides healthcare providers with a structured and practical method for enhancing the reliability, cybersecurity preparedness, and the alignment of the imaging system with the requirements set by the national and international standards. By focusing on the governance of biomedical imaging systems, it provides a significant advance in Saudi Arabia’s digital ecosystem transformation based on evidence.

Keywords : Biomedical Imaging Systems; PACS; RIS; HIS; IT Audit Framework; Cybersecurity; System Quality; Regulatory Compliance; General Systems Theory; Saudi Arabia; Digital Health; Interoperability; Imaging Informatics.

References :

  1. Alahmadi, A., & Drew, S. (2020). Cybersecurity challenges in Saudi Arabian healthcare systems:
  2. A review of threats and mitigation strategies. Journal of Health Informatics in Developing Countries, 14(2), 1–12.
  3. Altuwaijri, M. M. (2019). E-health in Saudi Arabia: Current trends, challenges, and recommendations. Journal of Infection and Public Health, 12(6), 761–765.
  4. American College of Radiology. (2021). PACS and imaging informatics: Best practice guidelines. ACR Press.
  5. Arshad, J., Azad, M. A., & Khan, M. (2021). Security vulnerabilities in medical imaging systems: A systematic review. Computers in Biology and Medicine, 134, 104458.
  6. COBIT 2019 Framework: Governance and management objectives. (2019). ISACA.
  7. Health Sector Cybersecurity Framework. (2022). Saudi National Cybersecurity Authority.
  8. ISO/IEC 27001:2022. (2022). Information security, cybersecurity and privacy protection — Information security management systems — Requirements. International Organization for Standardization.
  9. Khan, R., & Al‑Sadi, A. (2020). Digital transformation in Saudi healthcare: Opportunities and challenges. International Journal of Medical Informatics, 141, 104241.
  10. NIST. (2018). Framework for improving critical infrastructure cybersecurity (Version 1.1). National Institute of Standards and Technology.
  11. Saudi Health Information Exchange Policies (SeHE). (2016). Saudi Ministry of Health.
  12. Smith, T., & Kessler, R. (2020). IT auditing in healthcare: Ensuring data integrity and system reliability. Health Information Management Journal, 49(3), 145–155.
  13. Van der Putten, W., & Riley, J. (2019). Medical imaging informatics: Principles and applications. Springer.
  14. Zhang, Y., & Zhao, L. (2021). Assessing the security posture of PACS and RIS systems in modern hospitals. Journal of Digital Imaging, 34(5), 1200–1212.

Biomedical imaging systems have proven to be relevant for current clinical practice; on the other hand, increasing complexity has resulted in substantial challenges in system quality, cybersecurity, and regulatory compliance. This study examines these challenges in a Saudi Arabian clinical context, in addition to presenting an IT audit framework for integrated imaging systems. The study, underpinning its methodological approach, using General Systems Theory (GST), used a qualitative case study design with semi-structured interviews, document reviews, and non-intrusive observations. Thematic analysis yielded four major issues identified: challenges to the quality/performance of the system, security risks and vulnerabilities involved, compliance deficiencies and inconsistencies between different components, and the interdependency between imaging subsystems. Here we highlight a few limitations of traditional IT audit methodologies, which are still unable to cope with imaging-specific operational and technical realities. Consistent with this demand, the IT audit framework proposed by this study refers to those four core dimensions: quality assessment, security evaluation, compliance verification, and subsystem interdependency. It provides healthcare providers with a structured and practical method for enhancing the reliability, cybersecurity preparedness, and the alignment of the imaging system with the requirements set by the national and international standards. By focusing on the governance of biomedical imaging systems, it provides a significant advance in Saudi Arabia’s digital ecosystem transformation based on evidence.

Keywords : Biomedical Imaging Systems; PACS; RIS; HIS; IT Audit Framework; Cybersecurity; System Quality; Regulatory Compliance; General Systems Theory; Saudi Arabia; Digital Health; Interoperability; Imaging Informatics.

Paper Submission Last Date
28 - February - 2026

SUBMIT YOUR PAPER CALL FOR PAPERS
Video Explanation for Published paper

Never miss an update from Papermashup

Get notified about the latest tutorials and downloads.

Subscribe by Email

Get alerts directly into your inbox after each post and stay updated.
Subscribe
OR

Subscribe by RSS

Add our RSS to your feedreader to get regular updates from us.
Subscribe