PD ISO/TR 11633-2:2009 - Page 2

Health informatics. Information security management for remote maintenance of medical devices and medical information systems. Implementation of an information security management system (ISMS) | Status: Superseded, Withdrawn

1 Scope This part of ISO/TR 11633 provides an example of selected and applied “controls” for RMS security based on the definition in the ISMS, on the basis of the risk analysis result mentioned in ISO/TR 11633-1. This part of ISO/TR 11633 excludes the handling of the communication problems and the use of encryption method. This part of ISO/TR 11633 consists of:

• — a catalogue of types of security environment in healthcare facilities and RMS providers;
• — an example of combinations of threats and vulnerabilities identified under the environment in the “use cases”;
• — an example of the evaluation and effectiveness based on the “controls” defined in the ISMS.