医院信息系统安全等级保护测评方案的设计  

Design of security classified protection testing and evaluation scheme for hospital information system

作　　者：李克潮[1] 

机构地区：[1]广西中医药大学附属瑞康医院计算机中心,广西南宁530011

出　　处：《大众科技》2016年第7期23-25,共3页Popular Science & Technology

基　　金：广西教育厅科研项目(201204LX481)

摘　　要：医院信息系统的发展是建立在信息安全、可靠的基础上。文章根据国家及行业信息安全等级保护的标准,结合某三级甲等医院的具体情况,从等级保护测评流程、测评对象、测评方法、测评工具、单元测评、整体测评等方面,对某三甲医院的信息系统等级保护测评方案进行设计。通过测评,发现医院信息系统存在的安全隐患,为该医院信息化建设的下一步整改提供科学、合理的依据。Development of hospital information system is based on the information security and reliability. According to the standards of national and industry information security classified protection, combining with the specific circumstances of one A-level tertiary hospital, using classified protection evaluation process, evaluation object, evaluation methods, evaluation tools, unit evaluation, overall evaluation and so on, designs information system classified protection testing and evaluation scheme for one A-level tertiary hospital. Through testing and evaluation, hospital information system security risks were found, that provide scientific and reasonable basis for next step of hospital information construction.

关 键 词：三甲医院 信息系统 等级保护 测评 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]