IEC/TR 80001-2-2:2012-07

Inhalt (en)

• FOREWORD
• INTRODUCTION
• Scope
• Normative references
• Terms and definitions
• Use Of security capabilities Unterkapitel anzeigen Unterkapitel ausblenden

  • Structure of a security capability entry
  • Guidance for use of security capabilities in the risk management process
  • Relationship of -based risk management to IT security risk management
• Security capabilities Unterkapitel anzeigen Unterkapitel ausblenden

  • Automatic logoff — ALOF
  • Audit controls — AUDT
  • Authorization — AUTH
  • Configuration of security features — CNFS
  • Cyber security product upgrades — CSUP
  • health data de-identification — DIDT
  • Data backup and disaster recovery — DTBK
  • Emergency access — EMRG
  • health data integrity and authenticity — IGAU
  • Malware detection/protection — MLDP
  • Node authentication — NAUT
  • 'Person authentication — PAUT
  • Physical locks on device — PLOK
  • Third-party components in product lifecycle roadmaps — RDMP
  • System and application hardening — SAHD
  • Security guides — SGUD
  • health data storage confidentiality — STCF
  • Transmission confidentiality — TXCF
  • Transmission integrity — TXIG
• Example of detailed specification under security capability: Person authentication — PAUT
• References
• Other resources Unterkapitel anzeigen Unterkapitel ausblenden

  • General
  • Manufacture disclosure statement for medical device security (MDS2)
  • Application security questionnaire (ASQ)
  • The Certification Commission for Healthcare Information Technology (CCHIT)
  • Functional Electronic Health Record (EHR)
  • Common criteria —
• Standards and frameworks
• Sample scenario showing the exchange of security information (informative) Unterkapitel anzeigen Unterkapitel ausblenden

  • Introduction to the security characteristics scenario
  • Manufacturer (MDM) Security Characteristics Report — "The Offering"
  • HDO's reply to the MDM Security Characteristics Report — "The Response"
• Examples of regional specification on a few security capabilities (informative)
• Security capability mapping to C-I-A-A (informative)