High level security policies for health: from theory to practice.
The design and implementation of a security policy for a healthcare organisation is by no means trivial but it is, at least, feasible, taking into account the wide range of information security and privacy enhancing technologies that are currently available. Considering, however, a shared care environment with the participation of many independent healthcare organisations and the requirement for exchanging electronic healthcare records, the situation becomes much more complex since the implementation of global security policy may turn out to be an over ambitious task. This paper aims to highlight the main sources of complexity and to provide pointers for managing or/and resolving them.
Defteraios
Spyros
S
Department of Information and Communication Systems Engineering, University of the Aegean, Karlovasi, GR-83200 Samos, Greece. deftereo@otenet.gr
Lambrinoudakis
Costas
C
Gritzalis
Dimitris
D
D022126:Access to Information; D003195:Computer Communication Networks / Q000458:organization & administration / Q000592:standards; D016494:Computer Security / Q000592:standards*; D003219:Confidentiality / Q000592:standards; D006801:Humans; D007256:Information Systems / Q000458:organization & administration / Q000592:standards; D008498:Medical Record Linkage / Q000592:standards; D016347:Medical Records Systems, Computerized / Q000458:organization & administration* / Q000592:standards; D017086:beta-Thalassemia / Q000628:therapy