title: The need for a security policy in health care institutions.
abstract: Because of the increasing role of information technology in health care more attention is needed for security. Legal, technical/organisational and social measures are needed. Based on general principles a high level security policy needs to be formulated for each institution. Based on such policy measures can be selected and implemented. The need for a high level policy is emphasized; as an example the high level policy developed within the AIM SEISMED project is briefly described.
authors.affiliation: Department of Mathematics, University of the Aegean, Karlovassi, Greece.
authors.forename: S K
authors.initials: SK
authors.lastname: Katsikas
authors.forename: D A
authors.initials: DA
authors.lastname: Gritzalis
mesh_terms: D016494:Computer Security / Q000331:legislation & jurisprudence; D003219:Confidentiality / Q000331:legislation & jurisprudence; D004995:Ethics, Professional; D005568:Forms and Records Control / Q000331:legislation & jurisprudence; D006268:Health Facilities / Q000331:legislation & jurisprudence; D058016:Health Facility Administration; D006801:Humans; D007256:Information Systems / Q000331:legislation & jurisprudence; D016134:Organizational Policy; D010344:Patient Advocacy / Q000331:legislation & jurisprudence; D011050:Policy Making; D012637:Security Measures