医疗机构信息系统安全等级保护框架设计与要求  

Framework design and requirements for information system security grading protection of medical organization

作　　者：范启勇[1] 徐御[2] 曹剑峰[1] 

机构地区：[1]上海市卫生局信息中心,200040 [2]上海市信息安全测评认证中心

出　　处：《中华医院管理杂志》2009年第4期217-219,共3页Chinese Journal of Hospital Administration

摘　　要：描述医疗机构信息系统安全防护体系中的安全等级保护。从构建系统模型、指导行业定级、威胁风险分析、导出安全目标、调整安全要求5个步骤阐述《医疗机构信息系统安全等级保护基本要求》的研究思路、过程及部分成果。Description of the security grading protection used in the security protection system for information systems in medical organizations. Elaboration of the research ideas, process and some outcomes for the Fundamental Requirements for Security Grade Protection of Information Systems in Medical Organizations, from the five aspects of system modeling, grading guidance for industries, threat and risk analysis, security objective output, and security adjustment.

关 键 词：医疗机构 信息系统 等级保护 

分 类 号：R197[医药卫生—卫生事业管理] TP309[医药卫生—公共卫生与预防医学]