IEEE P11073-40102 IEEE Draft Standard - Health informatics - Device interoperability - Part 40102: Cybersecurity - Capabilities for Mitigation

IEEE P11073-40102 IEEE Проект стандарта - информатика Здоровье - совместимость устройств - часть 40102: CyberSecurity - Возможности для смягчения

This standard defines application layer mitigation techniques for use within personal health devices for certain use cases or when certain criteria are met. The mitigation techniques are based on the extended Confidentiality, Integrity and Availability (CIA) triad and are described generally to allow manufacturers to determine the most appropriate algorithms and implementations. Generic recommendations for a scalable information security toolbox appropriate for Personal Health Devices (PHDs)/Point-of-Care Devices (PoCDs) interfaces are specified. A mapping of this standard to the National Institute of Standards and Technology (NIST) Cybersecurity framework and ISO/IEC 80001-2-2 is defined.