Title:
Beyond Compliance: Understanding the Gap Between Regulatory Adherence and Operational Cybersecurity Effectiveness in Healthcare Organizations

Authors:
r. Gilbert B. Mengnjo, Dr. Robb Shawe, USA

Abstract:

This study examines the disconnect between regulatory compliance and operational cybersecurity effectiveness in healthcare organizations. While compliance frameworks establish requirements for protecting sensitive data and systems, adherence to these standards does not necessarily ensure comprehensive cybersecurity. This study adopts a conceptual governance analysis, informed by evidence from organizational cases, to explore the limitations of compliance-driven approaches. The findings indicate that compliance activities often focus on documentation and audit readiness rather than operational resilience, resulting in gaps in risk management and system protection. The article introduces a compliance–effectiveness gap model and provides practical implications for aligning regulatory adherence with operational cybersecurity practices.

DOI: http://dx.doi.org/10.51505/ijaemr.2026.11310