Information security knowledge in supplementary management and leadership studies in medical/dental specialist training: Using self-assessment and simulated scenarios

Due to the digitization of society, eHealth and mHealth applications are increasingly integral to electronic healthcare. eHealth involves using information and communication technology in healthcare products, processes, and services. Information security threats include malware, vulnerabilities, data breaches, phishing, scams, espionage, and online activities. Networked medical devices also face risks from automation and IoT. Human error is the biggest risk factor in information security, with many safety risks overlooked due to haste, incompetence, or lack of understanding. Research, study, and vigilance in information security ensure a safe working environment. This qualitative study assesses the information security knowledge of doctors and dentists in the specialization phase through self-assessment, which has not been previously studied in Finland. It aims to identify knowledge gaps and use the findings to develop supplementary management and leadership studies, enhancing course variety. The research investigates whether simulated scenarios in a virtual learning environment could serve as a suitable teaching method to address these potential knowledge gaps, providing experiential learning. A VR experience was created to simulate information security scenarios in healthcare, designed to be inclusive for the general public, presenting scenarios from both patient and doctor/dentist perspectives. Simulated scenarios in virtual reality environments were evaluated through two field experiments at the event. The results revealed a knowledge gap in AI information security.