title: Use of the ISO/IEC 17799 framework in healthcare information security management.
abstract: Shared care implies sharing information. This requires a common concept of information security among healthcare providers and a system to maintain compliance to the security requirements within the healthcare community. This paper describes the use of the Code of Practice for Information Security Management ISO/IEC 17799 as a general framework for establishing a set of controls for information security in a particular organisation and as a framework for standards on information security in healthcare and their implementation.
authors.affiliation: Academic Medical Center, University of Amsterdam, P.O. Box 22660, 1100 DD Amsterdam, The Netherlands. w.l.posthumus@hetnet.nl
authors.forename: Luuc
authors.initials: L
authors.lastname: Posthumus
mesh_terms: D022126:Access to Information; D016494:Computer Security / Q000592:standards*; D003219:Confidentiality / Q000592:standards; D003695:Delivery of Health Care / Q000458:organization & administration*; D006801:Humans; D019451:Information Management / Q000458:organization & administration / Q000592:standards*; D007256:Information Systems / Q000458:organization & administration / Q000592:standards*; D016134:Organizational Policy