医疗机构信息资产安全管理探讨

Discussion about the Safety Management of Information Assets of Medical Institutions

医疗机构信息系统运营过程中会逐渐生成和沉淀大量临床医疗数据,是医疗机构的信息资产,包括医疗机构投资建设的软硬件系统,也包括其中生成的数据文件。正如同医疗机构的其他有形设备、设施资产一样,对无形资产的识别、盘点、厘清管理责任、定义使用范围、明确标示和建立生命周期管理,是医疗机构信息安全管理的重要环节。

In the process of information system operation of medical institutions will gradually generated precipitation and a large number of clinical medical data, these are all medical institutions of information assets, including medical institutions invest in the construction of hardware and software system, also including the generated data file. As medical institutions of other equipment, facilities tangible assets, the recognition of this kind of intangible assets, inventory, clarify the management responsibility, define scope of use, clearly labeled and establish life cycle management, is an important part of the information security management of medical institutions.