title: Implementation of information security and confidentiality policies, procedures, and standards.
abstract: The article describes one approach to developing and implementing a security program in response to the birth and growth of a computer-based patient record in a large teaching hospital. The discussion emphasizes the importance of the collaborative effort between the hospital and school of medicine in establishing one policy and set of standards because information is shared and electronically transferred between both institutions. The hospital's approach is summarized in five major steps: survey and literature search, development of key components or recommendations, institutional approval of the recommendations, feasibility analysis and projected time frame for implementation, and implementation of the recommendations with resolution of impediments to implementation.
authors.affiliation: Univeristy of North Carolina Hospitals, Chapel Hill, USA.
authors.forename: J W
authors.initials: JW
authors.lastname: Perry
mesh_terms: D016494:Computer Security / Q000592:standards*; D003219:Confidentiality; D005568:Forms and Records Control; D017408:Guidelines as Topic; D006746:Hospital Bed Capacity, 500 and over; D006785:Hospitals, University / Q000458:organization & administration*; D007373:Interinstitutional Relations; D016347:Medical Records Systems, Computerized / Q000458:organization & administration*; D009657:North Carolina; D016134:Organizational Policy; D010934:Planning Techniques; D016730:Program Development; D012577:Schools, Medical