The specificity of healthcare from

[rakhirhif8963]

How can one characterize the situation with digitalization in healthcare in general and what are its specific features from the point of view of information security?

We can confidently say that domestic medical institutions today are very mature organizations in terms of technology, often not only not inferior, but surpassing technology companies. We see this from our own everyday experience: patients, without leaving home, can find out the schedule of doctors, make an appointment, view the results of their tests, receive electronic prescriptions, etc. People can go to different clinics, knowing that doctors there will immediately see all the necessary information about the patient. Medical institutions exchange data, gaining access to centralized databases for storing information. And finally, such a promising area as telemedicine is quickly gaining momentum, which has become more actively used in the context of the pandemic.

the point of view of digitalization is that it guatemala mobile database storing and processing medical data of patients, which are subject to stricter requirements than ordinary personal data. The basis of legislation in this area is Federal Law No. 323-FZ "On the Fundamentals of Protecting the Health of Citizens in the Russian Federation" and Federal Law No. 152-FZ "On Personal Data", in addition, there are a number of other regulatory acts. In general, three groups of requirements for information security in the medical field can be distinguished: legislation on personal data, requirements for medical and government information systems, and requirements for critical information infrastructure (CII). All this is recorded in a number of government decrees and orders of the FSTEC of Russia. In the medical field, the main industry regulator is the Russian Ministry of Health, which intends to create uniform standards for information protection in the healthcare sector in the coming years, a uniform organizational and methodological policy for the implementation of information protection measures, while regularly monitoring the implementation of organizational and technical measures for information protection.