With the use of portol technology on the rise, the one concern that I have in integrating such components (lots of parts), was their lack of reference to CERT advisory issues regarding published vulnerabilities. My guess is I have to do my own homework and develop, then publish my own reference. But I am sure that this is an issue at every site now that EMRs are touting inteconnectivity with affiliate hospitals outside their Intranet Enterprise Networks. Is there a published best practice for these technologies (i.e. MS IIS, ASP.NET, SOAP, SSL...)?
Software/Hardware used:
VM-WARE, HP Windows Servers, Citrix Netscaler
ASKED:
July 31, 2010 4:04 PM
UPDATED:
August 1, 2010 5:52 pm
There actually has been a lot of work done for creating some of the best practices and standards to be adopted when communicating health records in the cloud. My recommendation is to look at what the NHIN (National Health Information Network) has released in the past. They covered the following subjects:
• design of services
• high-level functional requirements
• certification
• authentication
• authorization
• person identification
• location of health information
• transport standards
• data transactions
• auditing and logging
• dynamic data access
• communications
• data storage
I have had the opportunity to talk to the chief architect and few other stakeholders including the founder of the engine Mirth (used in the NHIN), and these guys are incredibly bright individuals and have spent tremendous resources in the research and developpement of these best practices. Most of course have been adopted from other industries, but with a little healthcare twist.
check out this link: Click here