EHR Cybersecurity Framework Evaluation: Keyword Search Outputs and Figures (NIST CSF 2.0, ISO/IEC 27001:2022, HITRUST CSF, NHS DSPT)

<p><br></p><p dir="ltr">This dataset contains the keyword search records, data extraction tables and figures from the MSc Cybersecurity dissertation "A Comparative Evaluation of Cybersecurity Governance Frameworks for Electronic Health Record Systems in the UK National Health Service" (Kushal Poudel, University of West London, 2026).</p><p dir="ltr">The study evaluated four frameworks (NIST CSF 2.0, ISO/IEC 27001:2022, HITRUST CSF v11.8.0 and the NHS Data Security and Protection Toolkit) against five EHR-specific threat categories: ransomware, FHIR API exploitation, IoMT vulnerabilities, insider threats and nation-state APT campaigns.

The framework documents were searched with a custom Python tool using 56 keywords in eight groups. For each match, the tool recorded the page number, the nearest control reference, the sentence containing the keyword and whether healthcare terms appeared nearby.</p><p dir="ltr">Files:</p><p dir="ltr">13 keyword search records (.txt), one for each framework document: NIST CSF 2.0, ISO 27001, HITRUST CSF and NHS Data Security Standards 1 to 10.</p><p dir="ltr">Appendix_A_Data_Extraction_Table.docx: the data extraction tables from Appendix A of the dissertation.</p><p dir="ltr">Six figures (.png) from Chapter 4: framework coverage by threat category, threat modelling integration, rating distributions by framework and by threat category, GDPR alignment against threat coverage, and threat coverage against threat modelling integration.</p><p dir="ltr">The tool locates evidence only.