Health informatics — Security and privacy requirements of EHR systems for use in conformity assessment

This specification examines electronic patient record systems at the clinical point of care that are also interoperable with electronic health records (EHRs). The specification addresses their security and privacy protections by providing a set of security and privacy requirements, along with guidelines and best practice for conformity assessment. It includes a cross-mapping of 82 security and privacy requirements against the Common Criteria categories in ISO/IEC 15408 (all parts).

Main sections:

· Scope

· Normative references

· Terms and definitions

· Abbreviations

· Security and privacy requirements

· Best practice and guidance for establishing and maintaining conformity assessment programs

· Annex A: Conformity assessment programs – design considerations and illustrative examples from member countries as of 2010

· Annex B: Comparison of jurisdictional requirements