ISO27799-2016标准翻译（格式修订）资源-CSDN文库

ISO标准

隐私安全

需积分: 37 120 浏览量 2022-08-29 14:39:34 上传评论收藏 2.29MB PDF 举报

资源推荐

资源详情

资源评论

August 2016

健康信息学-使用 IS0/IEC27002 (ISO

27799:2016 )进行健康信息安全管理

Health informatics - Information security management in

health using ISO/IEC 27002 (ISO 27799:2016 )

 
Contents 目录 
Contents 目录 .......................................................................................................................... 2 
Foreword 前言 ............................................................................................................... 16 
Introduction 引言 ......................................................................................................... 17 
Objectives 目标 ............................................................................................................. 20 
Relation to information governance，corporate governance and 
clinical governance 与信息治理、公司治理和临床治理的关系..................... 22 
Health information to be protected 需要保护的健康信息 ......................... 23 
Threats and vulnerabilities in health information security 健康信息安全
中的威胁和脆弱性 .................................................................................................. 25 
Who should read this International Standard? 谁应该阅读这个国际标
准？ .......................................................................................................................... 26 
Benefits of using this International Standard 使用本国际标准的收益 ..... 27 
How to use this International Standard 怎样使用本国际标准 ................... 28 
1  Scope 范围 ............................................................................................................... 23 
2  Normative references 规范性引用文件 .............................................................. 25 
3  Terms and definitions 术语和定义 ..................................................................... 25 
3.1  health informatics 健康信息学 .............................................................. 25 
3.2  health information system 健康信息系统 ........................................... 26 
3.3  healthcare 医疗保健 ................................................................................. 26 
3.4  healthcare organization 医疗保健组织 ................................................ 26 
3.5  health professional 健康专家 ................................................................ 26 
3.6  identifiable person 可识别个人 ............................................................. 26 
3.7  patient 患者 ............................................................................................... 26 
3.8  persona l health information 个人健康信息 ...................................... 26 
3.9  subject of care 护理对象 ......................................................................... 27 
4  Structure of this International Standard 本国际标准结构 ............................ 27 
Health-specific control 医疗健康特定控制措施 .............................................. 28 
Health-specific implementation guidance 医疗健康特定实施指南 .......... 28 

Other health-specific information  其他医疗健康特定信息 ........................ 29 
5  Information security policies 信息安全策略 ..................................................... 28 
5.1  Management di rection for information security 信息安全管理指
导  28 
5.1.1  Policies for information security 信息安全策略 ..................... 28 
Control 控制措施 .................................................................................. 28 
Health-specific control 医疗健康特定控制措施 ........................... 28 
Implementation guidance 实施指南 ............................................. 28 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 28 
Other information 其他信息 ............................................................ 31 
5.1.2  Review of the policies for information security 信息安全
策略的评审  31 
Control 控制措施 .................................................................................. 31 
Health-specific control 医疗健康特定控制措施 ........................... 31 
Implementation guidance 实施指南 ............................................. 31 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 31 
6  Organization of information security 信息安全的组织 ................................. 33 
6.1  Internal organization 内部组织 ............................................................. 33 
6.1.1  Information security roles and responsibilities 信息安全
角色和职责  33 
Control 控制措施 .................................................................................. 33 
Health-specific control 医疗健康特定控制措施 ........................... 33 
Implementation guidance 实施指南 ............................................. 34 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 34 
Other information 其他信息 ............................................................ 35 
6.1.2  Segregation of duties 职务分离 .................................................. 35 
Control 控制措施 .................................................................................. 35 
Health-specific control 医疗健康特定控制措施 ........................... 35 
Implementation guidance 实施指南 ............................................. 35 
Other information 其他信息 ............................................................ 35 

6.1.3  Contact with authorities 与官方联系 ......................................... 35 
Control 控制措施 .................................................................................. 35 
Implementation guidance 实施指南 ............................................. 35 
Other information 其他信息 ............................................................ 35 
6.1.4  Contact with special interest groups 与特殊利益团体联系 . 35 
Control 控制措施 .................................................................................. 35 
Implementation guidance 实施指南 ............................................. 35 
Other information 其他信息 ............................................................ 35 
6.1.5  Information security in project management 项目管理中
的信息安全  35 
Control 控制措施 .................................................................................. 35 
Implementation guidance 实施指南 ............................................. 35 
Health-specific control 医疗健康特定控制措施 ........................... 35 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 35 
Other health-specific information 其他医疗健康特定信息 ..... 36 
6.2  Mobile devices and teleworking 移动设备和远程工作 .................... 36 
6.2.1  Mobile device policy 移动设备策略............................................. 36 
Control 控制措施 .................................................................................. 36 
Implementation guidance 实施指南 ............................................. 36 
Health-speciﬁc implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 36 
Other information 其他信息 ............................................................ 37 
6.2.2  Teleworking 远程工作 ..................................................................... 37 
Control 控制措施 .................................................................................. 37 
Implementation guidance 实施指南 ............................................. 37 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 37 
Other information 其他信息 ............................................................ 38 
7  Human resource security 人力资源安全 ........................................................... 38 
7.1  Prior to employment 任用前 ................................................................. 38 
7.1.1  Screening 审查 .................................................................................. 38 
Control 控制措施 .................................................................................. 38 

Health-specific control 医疗健康特定控制措施 ........................... 38 
Implementation guidance 实施指南 ............................................. 39 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 39 
7.1.2  Terms and conditions of employment 任用条款及条件 ...... 39 
Control 控制措施 .................................................................................. 39 
Health-specific control 医疗健康特定控制措施 ........................... 39 
Implementation guidance 实施指南 ............................................. 40 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 40 
Other information 其他信息 ............................................................ 40 
7.2  During employment 任用中 .................................................................. 40 
7.2.1  Management responsibilities 管理责任 ................................... 41 
Control 控制措施 .................................................................................. 41 
Implementation guidance 实施指南 ............................................. 41 
Health-specific implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 41 
Other information 其他信息 ............................................................ 41 
7.2.2  Information security awareness, 意识、教育和培训 ............. 41 
Control 控制措施 .................................................................................. 41 
Health-specific control 医疗健康特定控制措施 ........................... 42 
Implementation guidance 实施指南 ............................................. 42 
Other information 其他信息 ............................................................ 42 
7.2.3  Disciplinary process 纪律处分流程 .............................................. 42 
Control 控制措施 .................................................................................. 69 
Implementation guidance 实施指南 ............................................. 69 
Health-speciﬁc implementation guidance 医疗健康特定实施
指南 .......................................................................................................... 69 
Other information 其他信息 ............................................................ 69 
7.3  Termination and change of employment 任用的终止和变更 ........ 69 
7.3.1  Termination or change of employment responsibilities 
任用终止或变更的责任 ...................................................................................................... 69 
Control 控制措施 .................................................................................. 69 