Standards and Guides for Implementing Security and Privacy for Health Information Technology-Reference-Cited by-同舟云学术

Standards and Guides for Implementing Security and Privacy for Health Information Technology

Published:2021 Issue: Volume: Page:643-665
ISSN:
Container-title:Research Anthology on Artificial Intelligence Applications in Security
language:
Short-container-title:

Author:

Akowuah Francis E.¹,Land Jonathan²,Yuan Xiaohong³,Yang Li²,Xu Jinsheng³,Wang Hong³

Affiliation:

1. Syracuse University, USA

2. The University of Tennessee at Chattanooga, USA

3. North Carolina A&T State University, USA

Abstract

In this chapter, the authors survey security standards and guides applicable to healthcare industry including control objective for information and related technologies (COBIT), ISO/IEC 27001:2005 (which has been revised by ISO/IEC 27001:2013), ISO/IEC 27002:2005 (which has been revised by ISO/IEC 27002:2013), ISO 27799:2008 (which has been revised by ISO 27799:2016), ISO 17090:2008 (which has been revised by ISO 17090:2015), ISO/TS 25237:2008, HITRUST common security framework (CSF), NIST Special Publication 800-53, NIST SP 1800, NIST SP 1800-8, and building code for medical device software security. This survey informs the audience of currently available standards that can guide the implementation of information security programs in healthcare organizations, and provides a starting point for IT management in healthcare organizations to select a standard suitable for their organizations.

Publisher

IGI Global

Reference25 articles.

1. Akowuah, F., Yuan, X., Xu, J., & Wang, H. (2012). An Overview of Laws and Standards for Health Information Security and Privacy. In Security & Management International Conference (pp. 403-408). Las Vegas, NV: CSREA Press.

2. Cost-Benefit Trade-Off Analysis of an ISMS Based on ISO 27001

3. Fraser, R. (2006, June 6). Canada Health Infoway. Academic Press.

4. Haigh, T., & Landwehr, C. (2014). Building Code for Medical Device Software Security. Retrieved October 10, 2017, from IEEE Cybersecurity: https://www.computer.org/cms/CYBSI/docs/BCMDSS.pdf