High level security policies for health care establishments.
Health Care Establishments (HCE) are today highly dependent upon Information and Communications Technologies (ICT). This increasing reliance upon ICT has stressed the need to foster security in Healthcare Information Systems (HIS). Security policies may have a significant contribution to this effort, but they could become the cause of portability and interoperability problems. Moreover, policies that fail to take into account all the aspects of HIS security, the legal and regulatory requirements, and the existence of several stakeholders may lead to ineffective or inefficient security measures. Policies of a special category, named Generic Security Policies (GSP), should be developed to provide policy-level harmonisation and guidance to policy-makers within HCE. Six such policies are comparatively reviewed herein.
Katsikas
Sokratis
S
Laboratory for Information & Communication Systems Security, Dept. of Information & Communication Systems Engineering, Univ. of the Aegean, GR-83200, Greece. ska@aegean.gr
Kokolakis
Spyros
S
D022126:Access to Information / Q000331:legislation & jurisprudence; D002170:Canada; D016494:Computer Security / Q000331:legislation & jurisprudence / Q000592:standards*; D003219:Confidentiality / Q000331:legislation & jurisprudence; D003695:Delivery of Health Care / Q000331:legislation & jurisprudence / Q000592:standards*; D005062:European Union; D006291:Health Policy / Q000331:legislation & jurisprudence; D007256:Information Systems / Q000331:legislation & jurisprudence / Q000592:standards*; D014481:United States