PD ISO/TR 11636:2009

Foreword
Introduction
1 Scope
2 Terms and definitions
3 Abbreviated terms
4 Network features in the healthcare field
5 Concept of network construction in the healthcare field
6 Threat analysis and measures
7 Network construction in the healthcare field
8 Cases of security measures in a dynamic on-demand VPN for
  exchange of healthcare information with external
  institutions
Annex A (informative) - Threat analysis and measures
Annex B (informative) - Security management of medical
                        information exchange including
                        personal data between independent
                        institutions
Annex C (informative) - Technical and operational checklists
                        for the guideline
Annex D (informative) - Technology used: Dynamic on-demand VPN
Bibliography

Describes the network requirements in the healthcare field, the network security of an open network for the healthcare field, and the minimum guidelines for security management of health information exchange, including personal data, between external institutions.

This Technical Report explains the network requirements in the healthcare field, the network security of an open network for the healthcare field, and the minimum guidelines for security management of health information exchange, including personal data, between external institutions.

These requirements will assist in understanding the operation of security and evaluation of security issues in the healthcare field, and the usefulness of a managed VPN, like a dynamic on-demand VPN.

This Technical Report introduces examples of security measures taken in a dynamic on-demand VPN for exchange of medical information; it is not intended to specify the dynamic on-demand VPN itself.

These examples provide network solutions to potential risks in such a user environment.