title: Security standards for medical information systems.
abstract: This paper has provided an overview of some of the aspects of medical information systems security and the standards that are available to implement security solutions. There is a need to address a complete solution for the security of medical information systems: technical, procedural and legal protection of medical records, databases, applications, hardware and software, networks and the management of the system. The existing standards cover some of these topics but not all. There is still room for further work and the development of standardised technological solutions supported by legal and procedural measures.
authors.affiliation: XiSEC Consultants Ltd, UK.
authors.forename: T
authors.initials: T
authors.lastname: Humphreys
mesh_terms: D016494:Computer Security / Q000592:standards*; D003219:Confidentiality; D005060:Europe; D017408:Guidelines as Topic; D006296:Health Services; D006801:Humans; D007256:Information Systems / Q000592:standards; D007391:International Cooperation; D008490:Medical Informatics / Q000592:standards*; D016347:Medical Records Systems, Computerized / Q000592:standards; D009656:North America; D018907:Privacy; D012637:Security Measures / Q000592:standards