基於ISO 27001之醫療機構資訊安全系統調查

徐宏修 ； 石俊榮

《NCS 2017 全國計算機會議》 2017 (2018/01) Pp. 861-866

https://doi.org/10.29428/9789860544169.201801.0161

摘要

本硏究希望透過了解不同性質的醫療機構在資訊系統安全管理上有何不同之處。將探討公、私立醫院彼此間的資訊安全差異，以及不同單位的資訊人員在資訊安全問題方式的差異處理。讓相關人員了解改善資訊系統的空間，對照其他同類型的單位如何處置相同的資訊安全問題，做爲制定資訊安全政策的參考依據。本硏究參考ISO 27001，透過問卷調查各個醫療機構彼此間在對於資訊安全管理系統上的需求。希望可以做爲日後其他相關應用與探討一個可以依循的方向，希望能讓各個單位的資訊系統安全達到更加完善的目標，讓資訊系統能夠確切的發揮預期的功效。

關鍵字

資訊安全 ； 醫療資訊系統 ； 資訊安全政策 ； ISO 27001

並列摘要

This research hopes to understand how different medical institutions differ in the safety management of information systems. It will explore the differences of information security between public and private hospitals, and the differences of information personnel in different units in the way of information security. So that the relevant staff to understand the improvement of information system, compared with other types of units how to deal with the same information security issues, as a reference for the development of information security policy. Through a questionnaire survey of the various medical institutions, this research based on ISO 27001 can determine the information security management system needs. It can be used as other related applications and explore a direction that can be followed in the various units of information system security to achieve a more perfect goal, Let information systems be able to perform effectively.

並列關鍵字

Information Security ； Medical Information Systems ； Information Security Policy ； ISO 27001