1 Scope
This Technical Specification examines electronic patient record systems at the clinical point of care that are also interoperable with EHRs.
Hardware and process controls are out of the scope. This Technical Specification addresses
their security and privacy protections by providing a set of security and privacy
requirements, along with guidelines and best practice for conformity assessment.
ISO/IEC 15408 (all parts)
defines “targets of evaluation” for security evaluation of IT products. This Technical Specification includes a cross-mapping of 82 security and privacy
requirements against the Common Criteria categories in ISO/IEC 15408 (all parts). The point-of-service (POS) clinical software is typically part of a larger system,
for example, running on top of an operating system, so it must work in concert with
other components to provide proper security and privacy. While a Protection Profile (PP) includes requirements for component security functions to support system security
services, it does not specify protocols or standards for conformity assessment, and does not address privacy requirements.
This Technical Specification focuses on two main topics:
-
a) Security and privacy requirements (Clause 5). Clause 5 is technical and provides a comprehensive set of 82 requirements necessary to protect
(information, patients) against the main categories of risks, addressing the broad scope of security and privacy concerns for point of care, interoperable
clinical (electronic patient record) systems. These requirements are suitable for conformity assessment purposes.
-
b) Best practice and guidance for establishing and maintaining conformity assessment programs (Clause 6). Clause 6 provides an overview of conformity assessment concepts and processes that can be used by governments, local authorities, professional
associations, software developers, health informatics societies, patients’ representatives and others, to improve conformity with health software security
and privacy requirements. Annex A provides complementary information useful to countries in designing conformity assessment programs such as further material on conformity assessment business models, processes and other considerations, along with illustrative examples
of conformity assessment activities in four countries.
Policies that apply to a local, regional or national implementation environment, and
procedural, administrative or physical (including hardware) aspects of privacy and
security management are outside the scope of this Technical Specification. Security
management is included in the scope of ISO 27799.