セキュリティ－ （４／６）

• Normative Reference（参照すべきセキュリティ関連仕様）

  • prEN 13608-1:2005 Health informatics – Security for healthcare communication – Part 1: Concepts and terminology
  • prEN 13608-2:2005 Health informatics – Security for healthcare communication – Part 2: Secure data objects
  • prEN 13608-3:2005 Health informatics – Security for healthcare communication – Part 3: Secure data channel
  • EN 14484:2003 Health informatics - International transfer of personal health data covered by the
  • EU data protection directive - High level security policy
  • EN 14485:2003 Health informatics - Guidance for handling personal health data in international applications in the context of the EU data protection directive
  • ISO 22857:2004 Health informatics - Guidelines on data protection to facilitate trans-border flows of personal health information
  • ISO/IEC 2382-8:1998 Information technology – Vocabulary -- Part 8: Security
  • ISO 7498-2:1988 Information processing systems – Open Systems Interconnection – Basic Reference Model – Part 2: Security Architecture
  • ISO/IEC 17799:2005 Information technology -- Code of practice for information security management
  • ISO/DIS prEN 27799:2005 Health informatics – Security management in health using ISO/IEC 17799
  • ISO/TS 18308:2004 Health informatics - Requirements for an electronic health record architecture
  • RFC 3881:2004 Security Audit and Access Accountability Message - XML Data Definitions for Healthcare Applications, published by IETF 2004
  • ISO/TS 22600-1:2005 Health Informatics – Privilege management and access control – Part 1: Overview and policy management
  • ISO/TS 22600-2:2005 Health Informatics – Privilege management and access control – Part 2: Formal Models
  • ISO/TS 21091:2005 Health informatics – Directory services for security, communications, and identification of professionals and patients.