本技术报告为AAMI/IEC 80001-2-2中概述的框架的应用提供了指导。管理将医疗设备连接到IT网络的风险需要披露与安全相关的能力和风险。AAMI/IEC 80001-2-2提供了本公开的框架，以及围绕AAMI/IEC 80001-1 IT网络风险管理的安全对话。AAMI/IEC 80001-2-2提供了一组信息丰富的通用描述性安全相关功能，这些功能在了解用户需求方面非常有用。本报告阐述了每个安全能力，并确定了安全控制措施，供所有利益相关者在风险管理活动、供应商选择、设备选择等过程中考虑。

This technical report provides guidance for the application of the framework outlined in AAMI/IEC 80001-2-2. Managing the RISK in connecting MEDICAL DEVICES to IT-networks requires the disclosure of security-related capabilities and RISKS. AAMI/IEC 80001-2-2 presents a framework for this disclosure and the security dialog that surrounds the AAMI/IEC 80001-1 RISK MANAGEMENT of IT-networks. AAMI/IEC 80001-2-2 presents an informative set of common, descriptive security-related capabilities that are useful in terms of gaining an understanding of user needs. This report addresses each of the SECURITY CAPABILITIES and identifies SECURITY CONTROLS for consideration by all stakeholders during RISK MANAGEMENT activities, supplier selection, device selection etc.