大数据时代医院病案信息安全风险管理的研究  

Research on Security Risk Management of Medical Record Information in Hospital in the Era of Big Data

作　　者：冯钰宁 FENG Yuning(Department of Medical Record Statistics,Department of Medical Affairs,Sun Yat-Sen Memorial Hospital,Sun Yat-Sen University,Guangzhou Guangdong 510120,China)

机构地区：[1]中山大学孙逸仙纪念医院医务部病案统计科,广东广州510120

出　　处：《中国卫生标准管理》2024年第20期9-12,共4页China Health Standard Management

摘　　要：大数据时代医院病案信息存在较大安全风险,文章研究目的是引入安全风险管理方法,探讨病案信息安全管理措施。首先通过安全风险识别,确认病案信息面临网络安全、员工不当操作、业务外包、火灾等9种安全风险。然后根据国家有关法规,确定安全风险管理要遵循预防为主、常备不懈的方针,工作原则是以人为本、人与病案兼顾、响应迅速、措施果断。最后论证风险防范及处置措施,主要措施包括加强员工业务能力与安全知识培训、提升职业素养、严格工作纪律、加强对第三方公司监管、升级网络防护功能、定期维护烟感等安全设施、编制应急预案并举行应急演练。落实安全风险管理措施可使风险控制在可以接受的程度。There are significant risks to the security of medical record information in the era of big data.It is the purpose of this article that measures for security management of medical record information are explored by applying risk management methods.Firstly,through security risk identification,it is discovered that medical record information faces nine security risks,including network security,improper operation by employees,business outsourcing and fire.Then,according to relevant national regulations,it is determined that security risk management should follow a strategy of prevention first and constant preparation,and the working principle is people-oriented,balancing people and medical records,responding quickly,and taking decisive measures.Finally,measures for risk prevention and disposal are demonstrated,and the measures include strengthening employee business skills and safety knowledge training,improving professional ethics,strict work discipline,strengthening supervision of third-party companies,upgrading network protection functions,regularly maintaining safety facilities such as smoke detectors,preparing emergency plans,and conducting emergency drills.The risks are controlled to an acceptable level when risk management measures are carried out.

关 键 词：病案管理 病案信息 信息安全 安全风险 风险管理 应急预案 

分 类 号：R197[医药卫生—卫生事业管理]