Published
ISO 22600 defines principles and specifies services needed for managing privileges and access control to data and/or functions.
It focuses on communication and use of health information distributed across policy domain boundaries. This includes healthcare information sharing across unaffiliated providers of healthcare, healthcare organizations, health insurance companies, their patients, staff members, and trading partners by both individuals and application systems ranging from a local situation to a regional or even national situation.
It specifies the necessary component-based concepts and is intended to support their technical implementation. It will not specify the use of these concepts in particular clinical process pathways.
ISO 22600-3:2014 instantiates requirements for repositories for access control policies and requirements for privilege management infrastructures. It provides implementation examples of the formal models specified in ISO 22600‑2.
WITHDRAWN
ISO/TS 22600-3:2009
PUBLISHED
ISO 22600-3:2014
90.20
Standard under periodical review
Jul 15, 2025
Only informative sections of projects are publicly available. To view the full content, you will need to create an account. If you are a member, please log in to your account by clicking on the "Log in" button.