某市二级以上公立中医医院信息安全的现状调查与分析

Investigation and analysis of information security in public traditional Chinese medicine hospital hospitals above grade Ⅱ in a city

目的调查与分析某市二级以上公立中医医院信息安全现状。方法采用普遍调查方法,对2016~2018年某市二级及以上39家公立中医医疗机构(包括中医医院、中医专科医院、中西医结合医院和民族医医院,以下简称中医医院;其中二级医院13家,三级医院26家)信息安全现状进行调查,调查数据来源于各医院信息管理及信息技术等负责信息化建设的主要负责人填报。填报的主要内容包括信息安全的资金投入、网络安全措施、操作系统及数据库安全措施、信息安全人员及培训、信息安全应急响应等5个方面,并对上述数据运用SPSS 14.0和Excel软件进行统计分析研究,统计方法包括统计描述和χ2检验。结果经调查发现,某市二级以上公立中医医院仍存在信息安全资金投入不足、基础设施建设不到位、信息安全人才匮乏、应急响应不完善等问题。结论针对某市存在的信息安全问题,提出加大信息安全资金投入力度,完善医院基础设施安全建设,大力引进和培养信息安全专业人才,制订周密的应急预案等建议,提高中医医院信息安全水平。

Objective To investigate and analyze the information security status of public Traditional Chinese medicine hospitals above grade Ⅱ in a city. Methods The general survey method was adopted to investigate 39 public Traditional Chinese medicine hospital institutions (including traditional Chinese medicine hospitals, traditional Chinese medicine hospital specialist hospitals, integrated traditional Chinese and western medicine hospitals and ethnic medicine hospitals) at level Ⅱ and above in a city from 2016 to 2018, hereinafter referred to as traditional Chinese medicine hospitals. The information security status of 13 secondary hospitals and 26 tertiary hospitals was investigated, and the survey data came from the information management and information technology of each hospital and other main persons in charge of informatization construction. Provided the main content of the funded include information security, network security, operating system and database security, information security personnel and training, from five aspects, such as information security emergency response and the data using SPSS 14.0 and Excel software for statistical analysis, statistical methods including statistical description and chi-square test. Results Through investigation, it is found that the public TCM hospitals above grade Ⅱ in a city still have problems such as insufficient investment in information security, inadequate infrastructure construction, lack of information security talents and imperfect emergency response. Conclusion In view of the existing information security problems in a city, this paper puts forward some suggestions, such as increasing the investment of information security funds, improving the safety construction of hospital infrastructure, vigorously introducing and cultivating information security professionals, and formulating elaborate emergency plans, so as to improve the information security level of TCM hospitals.