Application of risk management for IT-networks incorporating medical devices -- Part 2-4: General implementation guidance for healthcare delivery organizations
包含医疗设备的IT网络风险管理的应用第2-4部分:医疗服务机构的一般实施指南
This helps a RESPONSIBLE ORGANIZATION through the key decisions and steps required to
establish a RISK MANAGEMENT framework, before the organization embarks on a detailed RISK
ASSESSMENT of an individual instance of a MEDICAL IT-NETWORK. This Technical Report is
addressed to all Healthcare Delivery Organizations. A Healthcare Delivery Organization includes
hospitals, doctors? offices, community care homes and clinics. It identifies a series of decision points
to steer the RESPONSIBLE ORGANIZATION through the process of understanding the MEDICAL
IT-NETWORK context and identifying any organizational changes required before undertaking the
RISK MANAGEMENT PROCESS identified in IEC 80001-1.