互联网医疗企业信息安全体系建设的研究

发布时间：2018-08-18 21:07

【摘要】：随着“互联网+”时代的到来,互联网医疗企业依托承载于互联网的各类信息系统为老百姓提供医疗服务,互联网像一把“双刃剑”,在使病人就诊变得效率和便利的同时,也带了巨大的安全隐患,如何通过在企业中建立信息安全体系去降低安全风险,让信息系统能够安全的对外提供服务已成为互联网企业亟待解决的难题。面对复杂的安全需求,思考互联网医疗企业的信息安全管理模式,去建立一个扩展性高、覆盖全面且易于落地的信息安全体系是本文撰写的初衷。笔者从互联网医疗企业所面临的安全需求背景入手,结合其特有的行业特点,对企业信息安全现状及其面临的安全风险和现实安全建设工作中存在的问题进行了深入的分析,依据国内及国际公认的安全管理标准和模型,基于各最佳安全实践,对互联网医疗行业的信息安全体系进行了设计,并对其中的关键点:安全组织、安全运营和安全技术进行了详细说明。同时,为安全体系的落地制定了建设流程,最后就企业为达到安全目标所建设该安全体系的收益进行了分析和评估。企业实施建设该套体系后,流程化的安全管理实现了信息安全常态化,能够不断根据需求进行改进,安全技术上则实现了安全纵深防御体系,使企业安全机制更合理有效,由此可见,笔者设计的信息安全体系是有效和科学的,能够满足互联网医疗企业的安全发展,体现了互联网安全特点,对其他互联网企业也极具参考价值。
[Abstract]:With the arrival of the "Internet" era, Internet medical enterprises provide medical services to the common people on the basis of various information systems loaded on the Internet. The Internet, like a "double-edged sword", makes patients' visits more efficient and convenient at the same time. With the huge security hidden trouble, how to establish the information security system to reduce the security risk and make the information system to provide services to the outside security has become a difficult problem for Internet enterprises to solve. In the face of complex security requirements, it is the original intention of this paper to think about the information security management model of Internet medical enterprises and to establish an information security system with high expansibility, comprehensive coverage and easy landing. Starting from the background of the security requirements faced by the Internet medical enterprises and combining their unique industry characteristics, the author makes a deep analysis of the present situation of information security in enterprises, the security risks they face and the problems existing in the practical security construction work. According to the national and international recognized safety management standards and models, and based on the best security practices, the information security system of the Internet medical industry is designed, and the key points are: security organization, Safety operation and safety technology are described in detail. At the same time, the construction process is made for the landing of the security system. Finally, the benefit of the safety system is analyzed and evaluated. After the enterprise implements the construction of the system, the process of security management realizes the normalization of information security, it can be improved continuously according to the demand, and the security technology realizes the security deep defense system, which makes the enterprise security mechanism more reasonable and effective. From this we can see that the information security system designed by the author is effective and scientific, which can meet the security development of Internet medical enterprises and reflect the characteristics of Internet security. It is also of great reference value to other Internet enterprises.
【学位授予单位】：浙江工业大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;F49

【相似文献】