医院信息系统信息安全等级保护的实施探讨.pdf

文档介绍：第 30 卷第 1 期计算机应用与软件 Vol. 30 No. 1
2013 年 1 puter Applications and Software Jan. 2013
医院信息系统信息安全等级保护的实施探讨
郎漫芝1 王晖2 邓小虹3

1 首都医科大学北京 100069

2 卫生部卫生监督中心北京 100007

3 北京市卫生局北京 100053
摘要根据国家信息安全等级保护制度和卫生部相关文件的要求,结合医院信息系统的分类和特点,提出了医院信息系统的定
级建议,并对医院信息系统等级保护实施过程中的各个阶段分别进行了讨论。提出要采取措施同时保证系统的业务安全和信息安
全,并运用 PDCA 持续改进的理念,确保医院信息系统的持续安全运行。
关键词信息安全等级保护医院信息系统实施

中图分类号 TP309 文献标识码 A DOI 10. 3969 /j. issn. 1000-386x. 2013. 01. 050
DISCUSSION ON IMPLEMENTING CLASSIFIED INFORMATION SECURITY
PROTECTION FOR HOSPITAL INFORMATION SYSTEM
Lang Manzhi1 Wang Hui2 Deng Xiaohong3
, ,
1 Capital Medical University Beijing 100069 China
, ,
2 National Center for Health Inspection and Supervision Beijing 100007 China
, ,
3 Beijing Municipal Health Bureau Beijing 100053 China
,
Abstract In this paper we put forward the suggestions for grading the hospital information system HIS according to national classified
information security protection system and the requirement of related documents of the Ministry of Health and bination with the
classification and characteristics of HIS. We also discuss every phase in implementing the classified information security protection on HIS.
,
We point out that both the business safety and the information security should be guaranteed simultaneously and that to use the concept of
PDCA continuous improvement to ensur