Can cyber risk management insurance mitigate healthcare providers' intentions to resist electronic medical records?

Purpose: A recent exploratory study investigated healthcare providers' EMR resistance behaviors. Findings revealed that cyber-attack, was a major contributor to resistance. This phenomenon did not go unnoticed; by the end of 2016, the hospital purchased a cyber-risk management insurance policy. In this study, the same hospital is revisited to evaluate the policy's impact on intentions to resist the EMR. The purpose of this research is to empirically test a proposed conceptual model. Using integrated concepts from the Theory of Planned Behavior, the Information Security Policy Compliance Theory, and the aggregated Revealed Causal Map (RCM) of EMR Resistance.Methodology: Survey data were gathered from 237 healthcare providers at the hospital. The relationships proposed in the conceptual model were tested using structural equation modelling (SEM).Findings: The findings of this study indicate that having the cyber-risk insurance policy at the hospital has helped in mitigating healthcare providers' intentions to resist the EMR system. Additionally, it confirms the qualitative findings of the RCM of EMR resistance.Originality and value: This study provides a robust conceptual and empirically tested model and validated instruments for examining impacts of having a cyber-risk management policy at the hospital on healthcare providers' intentions to resist the EMR system.