Related Images

Dr Trish Williams

Dr Trish Williams

Dr Trish Williams

Senior Lecturer/Undergrad Co Ord

Telephone: (61 8)  6304 5039  
Email: trish.williams@ecu.edu.au   
Campus: Joondalup  
Room: JO18.242  

 

Responsibilities

Senior Lecturer and Course Coordinator

Current Teaching

Computer and information security, information warfare, information security standards and practice, communications - data and networking, decision support.

Background / Employment History

Trish is a Senior Lecturer in the School of Computer and Security Science at Edith Cowan University and a key researcher in the secau - Security Research Centre. Trish has a PhD and is internationally recognised for her expertise in Medical Information Security. She has over 25 years in the medical health computing arena with 15 years industry experience in General Practice and Pharmacy computing prior to joining academia in 2001. Trish is co-author of the Royal Australian College of General Practitioners Security Standards and advises to the General Practice Data Governance Council. With over 60 publications on medical information security, she is currently representing Standards Australia at International Standards Organisation (ISO) and HL7 meetings. Trish has been the Associate Editor and Track Chair of the medical information security track of the World Congress in Computer Science, Computer Engineering & Applied Computing. She has collaborated with Royal Holloway University, University of Plymouth and the prestigious St George’s Hospital.

Staff Qualifications

2007 Doctor of Philosophy in Computer Science
Research topic: Medical Information Security
Edith Cowan University, Perth, Western Australia

2006 Graduate Certificate in Education (Tertiary Teaching)
Edith Cowan University, Perth, Western Australia

2001 Master of Science (Computer Science)
Edith Cowan University, Perth, Western Australia

1983 Bachelor of Science (Honours) in Mathematics and Computing
University of Glamorgan (nee Polytechnic of Wales), Wales.

Professional Memberships

  • Australian Computer Society
  • Health Informatics Society of Australia
  • School Council, Peter Moyes Anglican Community School
  • Australian Federation of University Women
  • Business and Professional Women
  • HERDSA – Higher Education (ECU Representative 2005)
  • Australian Information Security Association
  • Research Network for A Secure Australia

Awards and Recognition

  • 2009: ECU Early Careers Grant $25,000
  • 2008: ECU Faculty Small Grant $3333
  • 2006: Carrick Institute Citation for Excellence in Teaching $10,000
  • 2005: ECU Vice Chancellor Citation $1000
  • 2005: Faculty Teaching and Learning Grant $3000

Research

Research Interests

  • Medical informatics and security
  • Australian national e-health initiative
  • Healthcare e-health standards
  • Generation Y teaching
  • Decision support systems

Current Research Areas

  • Healthcare computer and information security
  • Australia’s national e-health system
  • E-health critical infrastructure

Recent Research Grants

  • ECU Early Careers Grant $25,000

Recent Publications

Book Chapters

  • Williams, P.A.H. (2011). Is the biggest threat to medical information security simply a lack of understanding? In D.P. Hansen, A.J. Maeder, & L.K. Schaper (eds.) Health Informatics: The Transformative Power of Innovation, pp. 179-187. IOS Press: Amsterdam.

Refereed Journal Articles

  • Williams, P.A.H. (2009). Capturing Culture in Medical Information Security Research. Methodological Innovations, 4(3), 15-26.
  • Williams, P.A.H. (2008). In a 'trusting' environment, everyone is responsible for information security. Information Security Technical Report, 13(4), 207-215.
  • Williams, P.A.H. (2008). When trust defies common security sense. Health Informatics Journal,14(3), 211-221.
  • Williams, P.A.H. (2008). A Practical Application of CMM to Medical Security Capability. Information Management and Computer Security, 16 (1), 58-73.
  • Williams, P.A. H. (2007). Information Governance: A Model for Security in Medical Practice. Journal of Digital Forensics, Security and Law, 2(1), 54-67.
  • Williams, P.A. H. (2007). Medical data security: Are you informed or afraid?. International Journal of Information and Computer Security, 1(4), 414-429.
  • Williams, P. A. H., & Mahncke, R. (2006). Shared Electronic Health Records: A changing landscape for security in medical practice. Journal of Information Warfare, 5(2), 61-72.
  • Terado, E., & Williams, P. A. H. (2005). Securing PDAs in the healthcare environment. Journal of Information Warfare, 4(1), 61-68.
  • Anderson, K., Clayden, J., Ring, J., Combes, B., & Williams, P. A. H. (2005). Out of the frying pan and into the spa: developing an online learning community and culture. Pacific-Asian Education Journal, 17(1), 44-53.

Conference Papers

  • Williams, P.A.H. (2011). Why Australia’s health system will be a vulnerable national asset. In C. Valli (Ed.) Proceedings of the 2nd International Cyber Resilience Conference. pp. TBA. Perth: secau- Security Research Centre, Edith Cowan University,

2010

  • Hearn, K., Williams, P.A.H. & Mahncke, R.M. (2010). International relations and cyber attacks: Official and unofficial discourse. In P.A.H. Williams (Ed.) Proceedings of the 11th Australian Information Warfare and Security Conference, p. 7-12. Perth: Secau- Security Research Centre, Edith Cowan University
  • Mahncke, R. & Williams, P.A.H. (2010). Small Business - a cyber resilience vulnerability? In C. Valli (Ed.) Proceedings of the International Cyber Resilience Conference. pp. 112-117. Perth: secau- Security Research Centre, Edith Cowan University
  • McDermid, D, Williams, P.A.H., & Mahncke, R. (2010). An Information Security Governance Encounter in Medical Practice. In H. R. Arabnia, K. Daimi, M. R. Grimaila, G. Markowsky, S. Aissi, V. A. Clincy, L. Deligiannidis, D. Gabrielyan, G. Margarov, A. M. G. Solo, C. Valli, P. A. H. Williams (Eds.) Proceedings of the 2010 International Conference on Security & Management, SAM 2010, July 12-15, 2010, Las Vegas Nevada, USA, Vol. 2, pp. 637-643. USA: CSREA Press.
  • McDermid, D. C., Mahncke, R.J. and Williams, P. A. H. (2010). An information security governance framework for Australian primary health care providers. In C. Bolan (Ed.) Proceedings of the 7th Australian Information Security Management Conference, pp. 62-68. Perth: Secau - Security Research Centre, Edith Cowan University.
  • Patel, N. & Williams, P. A. H. (2010). Breaches in medical information security: The problem of reporting. In H. R. Arabnia, K. Daimi, M. R. Grimaila, G. Markowsky, S. Aissi, V. A. Clincy, L. Deligiannidis, D. Gabrielyan, G. Margarov, A. M. G. Solo, C. Valli, P. A. H. Williams (Eds.) Proceedings of the 2010 International Conference on Security & Management, SAM 2010, July 12-15, 2010, Las Vegas Nevada, USA, Vol. 2, pp. 633-636. USA: CSREA Press.
  • Williams, P.A.H. (2010). Is cyber resilience in medical practice security achievable? In C. Valli (Ed.) Proceedings of the International Cyber Resilience Conference. pp. 105-111. Perth: Secau-Security Research Centre, Edith Cowan University
  • Williams, P. A. H. (2010). Medical Information Security: Is it all too hard? In H. R. Arabnia, K. Daimi, M. R. Grimaila, G. Markowsky, S. Aissi, V. A. Clincy, L. Deligiannidis, D. Gabrielyan, G. Margarov, A. M. G. Solo, C. Valli, P. A. H. Williams (Eds.) Proceedings of the 2010 International Conference on Security & Management, SAM 2010, July 12-15, 2010, Las Vegas Nevada, USA, Vol. 2, pp. 644-650. USA: CSREA Press.
  • Williams, P. A. H. (2010) An ill-defined problem – effective biomedical informatics curriculum? In D. Hansen, L. Schaper, & D. Rowlands, (Eds.), Proceedings of the HIC2010 Informing the Business of Health Care, International Conference, pp. 101-108. Health Informatics Society of Australia Ltd, Sydney, Australia.
  • Williams, P.A.H. (2010). Improving Medical Information Security using Contextualization Models. In A. Ware (Ed.), Annual International Conference on Infocomm Technologies in Competitive Strategies (ICT 2010), pp.65-68. Singapore, Global Science and Technology Forum (GSTF).
  • Williams, P.A.H. (2010). Information Warfare: Time for a redefinition. In P.A.H. Williams (Ed.) Proceedings of the 11th Australian Information Warfare and Security Conference, pp.37-44. Perth: Secau - Security Research Centre, Edith Cowan University.
  • Williams, P.A.H. (2010). Trust: An overlooked information security vulnerability?. Connect Newsletter for Mental Health Informatics Special Interest Group, Royal College of Psychiatrists, UK,17(1), 5-6.
  • Williams, P.A.H., Scott, R, and Paine, D. (2010). An Engaging Leadership Framework (ELF) Project investigating how Gen Y students learn, in ECulture 2011: Educating for Employability. 2010, CLD: Edith Cowan University.
  • Royal Australian College of General Practitioners, Computer Security Guidelines (3rd edition). South Melbourne: RACGP

2009

  • Hearn, K., Mahncke, R.J. and Williams, P. A. H. (2009). Culture jamming: from activism to hactivism. In P.A.H. Williams (Ed.) Proceedings of the 10th Australian Information Warfare and Security Conference, (pp.13-17), SECAU Security Research Centre, Edith Cowan University, Perth, WA.
  • Mahncke, R.J., McDermid, D. C. and Williams, P. A. H. (2009). Measuring information security governance within general medical practice. In C. Bolan (Ed.) Proceedings of the 7th Australian Information Security Management Conference, (pp.63-71), SECAU Security Research Centre, Edith Cowan University, Perth, WA.
  • McDermid, D. C., Mahncke, R.J. and Williams, P. A. H. (2009). Challenges in improving information security practice in Australian general practice. In C. Bolan (Ed.) Proceedings of the 7th Australian Information Security Management Conference, (pp.1-5), SECAU Security Research Centre, Edith Cowan University, Perth, WA.
  • Williams, P. A. H. (2009). What does security culture look like for small organizations?In C. Bolan (Ed.) Proceedings of the 7th Australian Information Security Management Conference, (pp.48-54), SECAU Security Research Centre, Edith Cowan University, Perth, WA.

2008

  • Ami-Narh, J. T., & Williams, P. A. H. (2008). Digital forensics and the legal system: A dilemma of our times. In C. Valli and A. Woodward (Eds.), Proceedings of the 6th Australian Digital Forensics Conference, (pp.30-40), SECAU Security Research Centre, Edith Cowan University, Perth, WA.
  • Tank, R., & Williams, P. A. H. (2008). The impact of U3 devices on forensic analysis.In C. Valli and D. Cook (Eds.), Proceedings of the 6th Australian Digital Forensics Conference, (pp.199-205), SECAU Security Research Centre, Edith Cowan University, Perth, WA.
  • Williams, P. A. H. (2008). Is there an ideal forensic process? In H.R. Arabnia, S. Aissi & M. Bedworth (Eds.) Proceedings of the 2008 World Congress in Computer Science, (2nd ed) Computer Engineering, and Applied Computing - SAM'08 - The 2008 International Conference on Security & Management, (pp. TBA). USA: CSREA Press.
  • Williams, P. A. H. (2008). How addressing implementation issues can assist in medical information security governance. In N.L. Clarke & S.M. Furnell (Eds.), Proceedings of the Second International Symposium on Huam Aspects of Information Security and Assurance, (pp. 116-125), Plymouth: University of Plymouth.
  • Williams, P. A. H. (2008). Can an Adapted Clinical Governance Model be Used to Improve Medical Information Security? In D. Remenyi (Ed.), Proceedings of the 7th European Conference on Information Warfare and Security. (pp.219-228), Reading: Academic Conferences Limited.
  • Williams, P. A. H., & Mathew, R.J. (2008). Can intrusion detection implementation be adapted to end-user capabilities? In C. Valli and A. Woodward (Eds.), Proceedings of the 6th Australian Information Security Management Conference, (pp.145-154), SECAU Security Research Centre, Edith Cowan University, Perth, WA.
  • Williams, P. A. H., & Swanson, I. (2008). Virtual environments support insider security violations. In C. Valli and D. Cook (Eds.), Proceedings of the 6th Australian Digital Forensics Conference, (pp.169-176), SECAU Security Research Centre, Edith Cowan University, Perth, WA.
  • Williams, P. A. H., & Valli, C. (2008). Trust me. I am a Doctor. Your records are safe. In C. Valli and A. Woodward (Eds.), Proceedings of the 6th Australian Information Security Management Conference, (pp.155-162), SECAU Security Research Centre, Edith Cowan University, Perth, WA.

2007

  • Ami-Narh, J. T. & Williams, P. A. H. (2007). The need for a security/privacy model for the health sector in Ghana. In C. Valli and A. Woodward (Eds.), Proceedings of the 5th Australian Information Security Management Conference, 96-102, School of Computer and Information Science, Edith Cowan University, Perth, WA.
  • Al-Hajri, H & Williams, P. A. H. (2007). The effectiveness of investigative tools for Secure Digital (SD) Memory Card forensics. In C. Valli and A. Woodward (Eds.), Proceedings of the 5th Australian Digital Forensics Conference, 22-33, School of Computer and Information Science, Edith Cowan University, Perth, WA.
  • Williams, P. A. H. (2007). Medical insecurity: when one size does not fit all. In C. Valli and A. Woodward (Eds.), Proceedings of the 5th Australian Information Security Management Conference, 226-233, School of Computer and Information Science, Edith Cowan University, Perth, WA.
  • Williams, P. A. H. (2007). The effects of IT on information culture in general medical practice. Paper presented at the TILC 2007 T2-Technology and Transformation: Transforming Information and Learning Conference, Edith Cowan University.
  • Williams, P. A. H. (2007). A holistic perspective on models for medical information security. In H.R. Arabnia & S. Aissi (Eds.) Proceedings of the 2007 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM'07 - The 2007 International Conference on Security & Management, 510-519. USA: CSREA Press.
  • Woodward, A & Williams, P. A. H. (2007). Wireless Rx - Risk assessment and recommendations for securing a wireless network in a medical practice. In H.R. Arabnia & S. Aissi (Eds.) Proceedings of the 2007 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM'07 - The 2007 International Conference on Security & Management, 501-505. USA: CSREA Press.
  • Mahncke, R.J. & Williams, P. A. H. (2007). The issues in securing electronic health information in transit. In H.R. Arabnia & S. Aissi (Eds.) Proceedings of the 2007 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM'07 - The 2007 International Conference on Security & Management, 489-495. USA: CSREA Press

2006

  • Mahncke, R. & Williams, P. A. H. (2006). Secure transmission of shared electronic health records: A review. In C. Valli and A. Woodward (Eds.), Proceedings of the 4th Australian Information Security Management Conference, 184-195, School of Computer and Information Science, Edith Cowan University, Perth, WA.
  • Webb, D. & Williams, P. A. H. (2006). Telemedicine and the digital door doctor. In C. Valli and A. Woodward (Eds.), Proceedings of the 4th Australian Information Security Management Conference, 184-195, School of Computer and Information Science, Edith Cowan University, Perth, WA.
  • Williams, P. A. H. (2006). Making Research Real: Is Action Research a Suitable Methodology for Medical Information Security Investigations? In C. Valli and A. Woodward (Eds.), Proceedings of the 4th Australian Information Security Management Conference, 184-195, School of Computer and Information Science, Edith Cowan University, Perth, WA.
  • Williams, P. A. H., & Mahncke, R. (2006) Primary care information security: A case for practical assistance. In J. Westbrook, J. Callan and G. Margelis (Eds.), Proceedings of the HIC2006 Bridging the Digital Divide: Clinician, Consumer and Computer International Conference, paper 51. Health Informatics Society of Australia Ltd, Sydney, Australia.
  • Williams, P. A. H., & Mahncke, R. (2006). Examination performance: Improvement through critical thinking. Paper presented at the Making and Keeping Connections: Life, Learning and Information Networks: Transforming Information and Learning 2006 Edith Cowan University.
  • Williams, P. A. H. (2006) Appraising information security rituals in primary care medical practice. In S.M. Furnell and P. S. Dowland (Eds.), Proceedings of the Sixth International Network Conference, (pp. 261-268), University of Plymouth, Plymouth, UK.
  • Williams, P. A. H. (2006). The role of standards in medical information security: An opportunity for Improvement. In H.R. Arabnia & S. Aissi (Eds.) Proceedings of the 2006 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM'06 - The 2006 International Conference on Security & Management, (pp.415-420). USA: CSREA Press.
  • Williams, P. A. H. (2006). Security immunisation using basic countermeasures. In H.R. Arabnia & S. Aissi (Eds.) Proceedings of the 2006 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM'06 - The 2006 International Conference on Security & Management, (pp.426-432). USA: CSREA Press.
  • Williams, P. A. H., & Woodward, A. (2006). Aligning academic perceptions of what constitutes a 'graduate' with university graduate attributes. Proceedings of Experience of Learning: 15th Annual Teaching and Learning Forum. Perth, University of Western Australia. http://lsn.curtin.edu.au/tlf/tlf2006/refereed/williams.html.
  • Terry, J., Williams, P. A. H., & Mahncke, R. (2006). Student Perceptions of Problem Solving through a Pair Programming Technique. Paper presented at the EDU-COM 2006 Engagement and Empowerment Nong Khai, Thailand.

2005

  • Williams, P. A. H. (2005). Information security awareness of medical practitioners. In J. Slay (Ed.), Developing Partnerships: Proceedings of the 1st Colloquium of Information Systems Security Education - Asia Pacific (CISSE-AP). 32-41. Mawson Lakes, SA: School of Computer and Information Science, University of South Australia. (Best Paper Award)
  • Williams, P. A. H., & Woodward, A. (2005). Elicitation and customisation of generic skills in a security major. In J. Slay (Ed.), Developing Partnerships: Proceedings of the 1st Colloquium of Information Systems Security Education - Asia Pacific (CISSE-AP). 42-50. Mawson Lakes, SA: School of Computer and Information Science, University of South Australia.
  • Williams, P. A. H., & Mahncke, R. (2005). A new breed of risk: Electronic medical records. In G. Pye and M. Warren (Eds.), Protecting the Australian Homeland: Proceedings of the 6th Australian Information Warfare and Security Conference. 227-234. Deakin University, Geelong, Vic.: School of Information Systems, Deakin University.
  • Williams, P. A. H. (2005). The underestimation of threats to patient data in clinical practice. In C. Valli and A. Woodward (Eds.), Proceedings of the 3rd Australian Information Security Management Conference, 117-122, School of Computer and Information Science, Edith Cowan University, Perth, WA.
  • Williams, P. A. H. (2005). Physician secure thyself. In C. Valli and A. Woodward (Eds.), Proceedings of the 3rd Australian Information Security Management Conference, 111-166, School of Computer and Information Science, Edith Cowan University, Perth, WA. (Best Paper Award)
  • Williams, P. A. H. (2005). Where are the policies for PDA usage in the Australian healthcare environment? In W. Hutchison (ed.), Proceedings of the 4th European Conference on Information Warfare and Security. 401-408, University of Glamorgan, Wales, UK: Academic Conferences Limited.
  • Williams, P. A. H., & Mahncke, R. (2005). Investigating student interaction: A forum analysis. In B. Combes and J. Clayden (Eds.), Proceedings of the Transforming Information and Learning Conference. 202-213. Edith Cowan University, Perth, Western Australia: School of Computer and Information Science.
  • Williams, P. A. H. (2005). Awareness invoking positive change: Reflections on lecturing practice in Computer and Information Science. In The Reflective Practitioner. Proceedings of the 14th Annual Teaching Learning Forum, 3-4 February 2005, Perth: Murdoch University. http://lsn.curtin.edu.au/tlf/tlf2005/refereed/williams.html.
  • Williams, P. A. H., & Johnson, J. (2005). Using online courseware for information literacy skills development in a multinational program. In M. Khosrow-Pour (Ed.), Managing Modern Organizations with Information Technology: Proceedings of the 2005 Information Resources Management Association International Conference, 62-64. San Diego, California, USA: Idea Publishing Group.
  • Williams, P. A. H., & Mahncke, R. (2005). The blurring of on-campus and off-campus education: A position paper. In M. Khosrow-Pour (Ed.), Managing Modern Organizations with Information Technology: Proceedings of the 2005 Information Resources Management Association International Conference, 190-193. San Diego, California, USA: Idea Group Publishing.

Reports

  • MacKeith, S., Cook, S. & Williams, P.A.H. (2010). What Business Wants: A Project Assessing SME’s attitudes and approach to gender equity in the workplace and female participation in the workforce. A Report for Security4Women By Business and Professional Women Australia

Research Student Supervision

Current

PhD

  • Rachel Mahncke -Measuring and Applying Information Security Governance within General Medical Practice
  • David Shaw – An investigation into remote transactions
  • Jeshua Yee – Information security policies

DIT

  • James Tetteh Ami-Narh - Application of a Technology Acceptance Model of E-health Acceptance Behaviour of Nurses in Ghana
  • Kyaw Kyaw Htat - An Investigation into the development of a handheld/smart-phone personal electronic medical record application: Technological requirements, compliance with government rules and regulations, privacy and confidentiality issues.

MSc

  • Patricia Mullholland - How useful is an ISMS in the real world? A study using a sample of commercial organisations in Perth, Western Australia to establish the extent to which the Information Security Management System as defined by the AS/NZS ISO/IEC 27001:2006 is applied in the commercial environment.

Recent

Honours

  • Neha Patel - An Examination of the Reporting of Information Security Breaches at General Medical Practices