DD ENV 13608-1:2000

Foreword
Introduction
1 Scope
2 Normative references
3 Definitions
4 Symbols and Abbreviations
5 Healthcare Communication Protection Profile Concepts
6 Architecture of the Policy Bridging Model (PBM)
Annex A (informative) Communication Protection Profile
                      examples and refinements
Annex B (informative) SEC-COM Part 2: Secure Healthcare
                      Data Objects
Annex C (informative) SEC-COM Part 3: Secure Data Channels
Annex D (informative) ISO/OSI 7498-2 Information processing
                      systems - Open Systems Interconnection
                      - Basic Reference Model - Part 2:
                      Security Architecture
Annex E (informative) ITU/CCITT X.435 Message Handling
                      Systems: Electronic Data Interchange
                      Messaging System (Recommendation X.435)
                      and ITU/CCITT F.435 Message Handling
                      Services: Electronic Data Interchange
                      Message Service (Recommendation F.435)
Annex F (informative) ISO 9735 EDIFACT Application level
                      syntax rules Electronic data
                      interchange for administration,
                      commerce and transport
Annex G (informative) ENV 12924:1997: Medical Informatics
                      - Security Categorisation and
                      Protection for Healthcare Information
                      Systems
Annex H (informative) Distribution Rules (CENTC251/WG1
                      N98-32 PT028)
Annex I (informative) HL7
Annex J (informative) CORBA
Annex K (informative) Common Criteria
Annex L (informative) Introduction to cryptography
Bibliography

Defines a methodology for defining, selecting and expressing a communication protection profile (CPP) specification, and provides a standard way to express healthcare user needs in relation to communication, and a standard method of successive refinement of policy statements that help to identify standardised security implementation specification that can be used to meet the security needs. Security aspects contained in the communication protection profile include confidentiality, integrity, availability and auditability.