The adoption of IT security standards in a healthcare environment.
Security is a vital part of daily life to Hospitals that need to ensure that the information is adequately secured. In Portugal, more CIOs are seeking that their hospital IS departments are properly protecting information assets from security threats. It is imperative to take necessary measures to ensure risk management and business continuity. Security management certification provides just such a guarantee, increasing patient and partner confidence. This paper introduces one best practice for implementing four security controls in a hospital datacenter infrastructure (ISO27002), and describes the security assessment for implementing such controls.
Gomes
Rui
R
Hospital S. Sebastião - Sta. Maria da Feira, Portugal.
Lapão
Luís Velez
LV
D003195:Computer Communication Networks / Q000592:standards*; D016494:Computer Security / Q000592:standards*; D003199:Computer Systems; D003219:Confidentiality / Q000331:legislation & jurisprudence; D006751:Hospital Information Systems / Q000592:standards*; D006801:Humans; D019451:Information Management / Q000592:standards*; D008492:Medical Informatics Computing / Q000592:standards*; D016347:Medical Records Systems, Computerized / Q000592:standards; D011174:Portugal; D012984:Software; D018511:Systems Integration