Chapter One — 1.1 Background to the Study

Organizations that depend on electronic health records are under increasing pressure to modernize, and DevSecOps Practices has emerged as one of the more promising avenues for doing so, given its demonstrated impact in related domains.

Despite this potential, many existing electronic health records were not originally designed with devsecops practices in mind, resulting in persistent gaps in decision support that limit their overall effectiveness. This study examines how DevSecOps Practices can be applied to help close that gap.

1.2 Statement of the Problem

Current electronic health records in many organizations struggle with inadequate decision support, often relying on manual processes or outdated architectures that were not designed for today's operating environment. Without a structured approach to integrating devsecops practices, these limitations are likely to persist, exposing organizations to inefficiency, risk, and a poor user experience. This study is motivated by the need to design and evaluate a devsecops practices-based approach to addressing this problem.

1.3 Objectives of the Study

1. To design and implement a devsecops practices-based approach to improving decision support in electronic health records.
2. To evaluate the effectiveness of DevSecOps Practices in enhancing decision support within electronic health records.
3. To identify the key requirements and constraints relevant to deploying devsecops practices in this context.
4. To assess user and stakeholder perception of the resulting system.

1.4 Research Questions

1. How can devsecops practices be applied to improve decision support in electronic health records?
2. How effective is DevSecOps Practices at enhancing decision support within electronic health records?
3. What requirements and constraints are relevant to deploying devsecops practices in this context?
4. How do users and stakeholders perceive the resulting system?

1.5 Significance of the Study

Beyond its immediate technical contribution, this study offers value to organizations evaluating whether to invest in devsecops practices for their own electronic health records, and contributes to the broader literature on applied software technology / IT by documenting a concrete implementation and evaluation case.

1.6 Scope of the Study

The study is limited to the design, implementation, and evaluation of a devsecops practices-based approach to improving decision support within electronic health records. Reflecting its MSc-level scope, it does not extend to a full commercial rollout or long-term post-implementation review beyond the study period.