title: High level security policies for health: from theory to practice.
abstract: The design and implementation of a security policy for a healthcare organisation is by no means trivial but it is, at least, feasible, taking into account the wide range of information security and privacy enhancing technologies that are currently available. Considering, however, a shared care environment with the participation of many independent healthcare organisations and the requirement for exchanging electronic healthcare records, the situation becomes much more complex since the implementation of global security policy may turn out to be an over ambitious task. This paper aims to highlight the main sources of complexity and to provide pointers for managing or/and resolving them.
authors.affiliation: Department of Information and Communication Systems Engineering, University of the Aegean, Karlovasi, GR-83200 Samos, Greece. deftereo@otenet.gr
authors.forename: Spyros
authors.initials: S
authors.lastname: Defteraios
authors.forename: Costas
authors.initials: C
authors.lastname: Lambrinoudakis
authors.forename: Dimitris
authors.initials: D
authors.lastname: Gritzalis
mesh_terms: D022126:Access to Information; D003195:Computer Communication Networks / Q000458:organization & administration / Q000592:standards; D016494:Computer Security / Q000592:standards*; D003219:Confidentiality / Q000592:standards; D006801:Humans; D007256:Information Systems / Q000458:organization & administration / Q000592:standards; D008498:Medical Record Linkage / Q000592:standards; D016347:Medical Records Systems, Computerized / Q000458:organization & administration* / Q000592:standards; D017086:beta-Thalassemia / Q000628:therapy