Applying CNS 17799 to Evaluate Information Security Management for Large scale Hospitals in Pingtung Area

• Main Authors: Yang, Chih-Hsiang, 楊智翔
• Other Authors: Fan, Tai-Sheng
• Format: Others
• Language: zh-TW
• Published: 2007
• Online Access: http://ndltd.ncl.edu.tw/handle/81282827298206500487

碩士 === 國立屏東科技大學 === 資訊管理系所 === 95 === Based on CNS 17799, a case study was conducted to evaluate information security management for three large scale hospitals in Pingtung area. In addition to personal interviews with information personnel, differences between three hospitals in information security management were compared. Suggestions for improvement on information security management were also given. Despite the item A6.2.2 “Security Process Dealing with Customers” and item A10.9.2 “On-line Transaction”, CNS 17799 is considered a suitable instrument to assess information security management for hospitals in general. It is also found that hospitals in the current study paid more attention on the items of A13 “Information Security Management Incident”, A8 “Security for Human Resources” and A7 “Assets Management”. However, A10 “Communication and Operation Management” and A11 “Access Control” were the two items that need to be improved the most.