The key points of hospital information security management measures are

Legal analysis: the progress of information security technology, especially the management technology above the network layer, provides more and more powerful technical means for hospital information security management. However, in the actual management process, the formulation of technical measures for safety management should be based on local conditions, taking into account comprehensively: the security risks faced by hospital information systems, the security expectations of information systems, the software and hardware of information systems, the technical maturity of technical measures, the cost of implementing technical measures and the maintainability of technical measures [

Legal basis: People's Republic of China (PRC) Data Security Law.

First, online medical data: health medical data such as examination reports, diagnosis results and past medical history are at risk of being illegally accessed, stolen, tampered with and maliciously uploaded due to vulnerability attacks and virus infections;

Second, medical associations access data: in the process of accessing and browsing sensitive data, medical associations and third-party service organizations may lead to the risk of leakage of important information such as doctor-patient privacy;

3. Clinical research data: Clinical research data involves demographic data, inspection information, inspection information, drug orders, diagnosis information, case and patient reports. Once it is leaked during transmission, the consequences will be very serious;

Fourth, medical insurance data: medical insurance data involves docking with third-party institutions, and faces security risks in system docking, data transmission, data use, data storage, data destruction and other links;

Fifth, medical equipment maintenance data: when medical equipment manufacturers maintain telemedicine equipment, data will face security risks such as unauthorized access, unsafe links, disclosure of private data and improper maintenance records.

6. Health big data center data: The lack of classification and grading mechanism leads to data security risks such as illegal login, unauthorized access, abnormal access, impersonation inquiry, bulk theft, and plaintext disclosure;

Seventh, wearable health device data: wearable device data has different levels of security risks in the stages of collection, storage and use;

Eighth, medical health APP data: Mobile applications involve many online health care services, and there are hidden dangers of revealing personal health status data, payment data, health resource data and public health information.