医院网络安全服务新模式研究与实践  

Research and Practice on New Mode of Hospital Network Security Service

作　　者：曹磊[1] 涂志炜[1] CAO Lei;TU Zhiwei(The First Affiliated Hospital of Nanchang University,Nanchang 330006,Jiangxi,China)

机构地区：[1]南昌大学第一附属医院,江西省南昌市330006

出　　处：《中国卫生信息管理杂志》2023年第5期689-693,701,共6页Chinese Journal of Health Informatics and Management

摘　　要：目的 针对传统信息安全建设的痛点,开展医院网络安全服务新模式实践,总结归纳医疗行业的网络安全建设最佳选择。方法 基于网络安全服务新模式,医院从技术、管理、组织3个维度强化安全建设,引入服务等级协议与网络安全保险强化网络安全防线,研究实践医院信息安全管理路径及方法。结果 创新了网络安全服务工作模式,构建了全方位的网络安全防护体系与运营体系,实现全院网络资产的统一纳管和细粒度安全防护,形成实验室(检验科)信息系统数据安全管理试点。结论 医疗行业的网络安全生态正逐步从传统被动防御模式转化为主动治理的模式,纵深的网络安全运营体系,以及统一安全风险管控的建设模式成为数字化医疗的最佳选择。Objective In response to the pain points of traditional information security construction,we carry out the practice of hospital network security service new modes,and summarize the best choices for information security construction in the medical industry.Methods Based on the new network security service mode,hospitals strengthen information security construction from the 3 dimensions of technology,management and organization,introduce Service-Level-Agreement and insurance to strengthen the network security defense line.Through the above methods to research and practice on hospital information security management.Results Innovate the working mode of network security service,build a comprehensive network security protection system and operation system,realize the unified management and fine-grained security protection of the network resources of the whole hospital,and form the Laboratory Information System data security pilot.Conclusion The network security ecology of the medical industry is gradually transforming from the traditional passive defense mode to the active governance mode.The deeper security operation system and the unified security risk control of hospital information have become the best choice for digital medical.

关 键 词：互联网医疗 信息安全管理 网络安全运营 数据安全治理 

分 类 号：R-058[医药卫生] R197.3