title: The adoption of IT security standards in a healthcare environment.
abstract: Security is a vital part of daily life to Hospitals that need to ensure that the information is adequately secured. In Portugal, more CIOs are seeking that their hospital IS departments are properly protecting information assets from security threats. It is imperative to take necessary measures to ensure risk management and business continuity. Security management certification provides just such a guarantee, increasing patient and partner confidence. This paper introduces one best practice for implementing four security controls in a hospital datacenter infrastructure (ISO27002), and describes the security assessment for implementing such controls.
authors.affiliation: Hospital S. Sebastião - Sta. Maria da Feira, Portugal.
authors.forename: Rui
authors.initials: R
authors.lastname: Gomes
authors.forename: Luís Velez
authors.initials: LV
authors.lastname: Lapão
mesh_terms: D003195:Computer Communication Networks / Q000592:standards*; D016494:Computer Security / Q000592:standards*; D003199:Computer Systems; D003219:Confidentiality / Q000331:legislation & jurisprudence; D006751:Hospital Information Systems / Q000592:standards*; D006801:Humans; D019451:Information Management / Q000592:standards*; D008492:Medical Informatics Computing / Q000592:standards*; D016347:Medical Records Systems, Computerized / Q000592:standards; D011174:Portugal; D012984:Software; D018511:Systems Integration