Information Security Standards for Health Information Systems: The Implementer’s Approach

View Sample PDF

Author(s): Evangelos Kotsonis (Adacom SA, Greece)and Stelios Eliakis (Athens University of Economics and Business, Greece)
Copyright: 2011
Pages: 33
Source title: Certification and Security in Health-Related Web Applications: Concepts and Solutions
Source Author(s)/Editor(s): Anargyros Chryssanthou (Hellenic Data Protection Authority, Greece), Ioannis Apostolakis (National School of Public Health, Greece)and Iraklis Varlamis (Harokopio University of Athens, Greece)
DOI: 10.4018/978-1-61692-895-7.ch006

Keywords: Health Information Systems / Information Security & Privacy / Medical Information Science Reference / Security & Forensics

Purchase

View Information Security Standards for Health Information Systems: The Implementer’s Approach on the publisher's website for pricing and purchasing information.

Abstract

Current developments in the field of integrated treatment show the need for IS security approaches within the healthcare domain. Health information systems are called to meet unique demands to remain operational in the face of natural disasters, system failures and denial-of-service attacks. At the same time, the data contained in health information systems are strictly confidential and, due to the ethical, judicial and social implications in case of data loss, health related data require extremely sensitive handling. The purpose of this chapter is to provide an overview of information security management standards in the context of health care information systems and focus on the most widely accepted ISO/IEC 27000 family of standards for information security management. In the end of the chapter, a guide to develop a complete and robust information security management system for a health care organization will be provided, by mentioning special implications that are met in a health care organization, as well as special considerations related to health related web applications. This guide will be based on special requirements of ISO/IEC 27799:2008 (Health informatics — Information security management in health using ISO/IEC 27002).

The IRMA Community

Research IRM

Information Security Standards for Health Information Systems: The Implementer’s Approach

Purchase

Abstract

Related Content

IRMA Sponsors