Glossary · Regulation
ISO/IEC 27001
Information security management systems
ISO/IEC 27001 is the certifiable standard for an information security management system: risk assessment, a statement of applicability and the controls of Annex A.
Hospitals and health authorities ask vendors for it as general proof of security practice; ISO 27799 adds the health-specific guidance on top.
Official source
See also
Explained in depth
Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →