Publication:
Managing Compliance and Risk Management in Health Care Settings

Simple item page
dc.contributor.advisorSarmiento, Alvaro Arenas
dc.contributor.authorRivera, Darwin Michael
dc.contributor.rorhttps://ror.org/02jjdwm75
dc.date.accessioned2025-09-01T12:15:02Z
dc.date.available2025-09-01T12:15:02Z
dc.date.issued2025
dc.description.abstractThis dissertation investigates how organizations operating in highly regulated environments manage the concurrent demands of regulatory compliance and information security risk management. Drawing on Oliver’s (1991) theory of strategic responses to institutional pressures, the study examines how organizations respond to overlapping external and internal pressures—particularly under resource constraints. Guided by two central research questions—(1) How do organizations manage compliance and risk management concurrently? and (2) How do they allocate resources to maximize compliance while minimizing security risks?—the study adopts an integrative approach that bridges the traditionally siloed domains of compliance, risk management, and information security. The research employs a two-part empirical design: a content analysis of compliance policies from 30 healthcare organizations and a case study of a children's hospital implementing a DEA-mandated Electronic Prescription for Controlled Substances (EPCS) system. The findings contribute to theory by identifying a previously undocumented tactic—prioritization—that organizations use to reconcile competing institutional demands. Another theoretical contribution is the development of a process model and a set of propositions that illustrate how organizations operating in highly regulated environments navigate the dual imperatives of compliance and risk management. By linking policy artifacts with real-world organizational behavior, this dissertation offers both scholarly and practical insights into how organizations navigate institutional complexity, enhance compliance maturity, and align security and regulatory needs.
dc.description.peerreviewedyes
dc.description.statusPublished
dc.formatapplication/pdf
dc.identifier.citationRivera, D. M. (2025) Managing Compliance and Risk Management in Health Care Settings
dc.identifier.urihttps://hdl.handle.net/20.500.14417/3846
dc.language.isoen
dc.page.total157
dc.publication.placeSegovia
dc.publisherIe University
dc.relation.entityIE University
dc.relation.phdPhD program
dc.relation.schoolIE Business School
dc.rightsAttribution-NonCommercial 4.0 International
dc.rights.accessRightsinfo:eu-repo/semantics/openAccess
dc.rights.urihttps://creativecommons.org/licenses/by-nc/4.0/deed
dc.titleManaging Compliance and Risk Management in Health Care Settings
dc.title.alternativeGestión del Cumplimiento y Gestión del Riesgo en la Industria del Cuidado de la Salud
dc.typeinfo:eu-repo/semantics/doctoralThesis
dc.version.typeinfo:eu-repo/semantics/publishedVersion
dspace.entity.typePublication
Files
Original bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
251033_rivera_publicacion_tesis.pdf
Size:
1000.66 KB
Format:
Adobe Portable Document Format
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
2.83 KB
Format:
Item-specific license agreed to upon submission
Description:
Download
Collections
Doctoral theses