BS ISO 17090-3:2008

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviations
5 Requirements for digital certificate policy
  management in a healthcare context
  5.1 General
  5.2 Need for a high level of assurance
  5.3 Need for a high level of infrastructure
      availability
  5.4 Need for a high level of trust
  5.5 Need for Internet compatibility
  5.6 Need to facilitate evaluation and
      comparison of CPs
6 Structure of healthcare CPs and healthcare CPSs
  6.1 General requirements for CPs
  6.2 General requirements for CPSs
  6.3 Relationship between a CP and a CPS
  6.4 Applicability
7 Minimum requirements for a healthcare CP
  7.1 General requirements
  7.2 Publication and repository responsibilities
  7.3 Identification and authentication
  7.4 Certificate life-cycle operational requirements
  7.5 Physical controls
  7.6 Technical security controls
  7.7 Certificate, CRL and OCSP profiles
  7.8 Compliance audit
  7.9 Other business and legal matters
8 Model PKI disclosure statement
  8.1 Introduction
  8.2 Structure of PKI disclosure statement
Bibliography

Gives guidelines for certificate management issues involved in deploying digital certificates in healthcare. It specifies a structure and minimum requirements for certificate policies, as well as a structure for associated certification practice statements.