I.S. EN ISO 27799:2016

Foreword
Introduction
1 Scope
  1.1 General
  1.2 Scope exclusions
2 Normative references
3 Terms and definitions
  3.1 Health terms
  3.2 Information security terms
4 Abbreviated terms
5 Health information security
  5.1 Health information security goals
  5.2 Information security within information governance
  5.3 Information governance within corporate and clinical
       governance
  5.4 Health information to be protected
  5.5 Threats and vulnerabilities in health information
       security
6 Practical action plan for implementing ISO/IEC 27002
  6.1 Taxonomy of the ISO/IEC 27002 and ISO/IEC 27001 standards
  6.2 Management commitment to implementing ISO/IEC 27002
  6.3 Establishing, operating, maintaining and improving the ISMS
  6.4 Planning: establishing the ISMS
  6.5 Doing: implementing and operating the ISMS
  6.6 Checking: monitoring and reviewing the ISMS
  6.7 Acting: maintaining and improving the ISMS
7 Healthcare implications of ISO/IEC 27002
  7.1 General
  7.2 Information security policy
  7.3 Organizing information security
  7.4 Asset management
  7.5 Human resources security
  7.6 Physical and environmental security
  7.7 Communications and operations management
  7.8 Access control
  7.9 Information systems acquisition, development and
       maintenance
  7.10 Information security incident management
  7.11 Information security aspects of business continuity
       management
  7.12 Compliance
Annex A (informative) - Threats to health information security
Annex B (informative) - Tasks and related documents of the
        Information Security Management System
Annex C (informative) - Potential benefits and required attributes
        of support tools
Bibliography

Describes guidelines to support the interpretation and implementation in health informatics of ISO/IEC 27002 and is a companion to that standard.