ISO/TR 11633-1:2009

Health informatics — Information security management for remote maintenance of medical devices and medical information systems — Part 1: Requirements and risk analysis

Scope

ISO/TR 11633-1:2009 focuses on remote maintenance services (RMS) for information systems in health care facilities as provided by vendors of medical devices or health information systems (RMS providers) and shows an example of carrying out a risk analysis in order to protect both sides' information assets (primarily the information system itself and personal health data) in a safe and efficient (i.e. economical) manner.
ISO/TR 11633-1:2009 consists of:

a catalogue of use cases for RMS;
a catalogue of information assets in healthcare facilities (HCF) and RMS providers;
an example of the risk analysis based on use cases.