Webstore





RS ISO/IEEE 11073-40102: 2022
Health informatics — Device interoperability — Part 40102: Foundational — Cybersecurity — Capabilities for mitigation

Abstract

Within the context of secure plug-and-play interoperability, cybersecurity is the process and capability of
preventing unauthorized access or modification, misuse, denial of use, or the unauthorized use of information
that is stored on, accessed from, or transferred to and from a PHD/PoCD. The capability part of cybersecurity
is information security controls related to both digital data and the relationships to safety and usability.
For PHDs/PoCDs, this standard defines a security baseline of application layer cybersecurity mitigation
techniques for certain use cases or for times when certain criteria are met. This standard provides a scalable
information security toolbox appropriate for PHD/PoCD interfaces, which fulfills the intersection of
requirements and recommendations from National Institute of Standards and Technology (NIST) and the
European Network and Information Security Agency (ENISA). This standard maps to the NIST cybersecurity
framework [B15]; IEC TR 80001-2-2 [B8]; and the Spoofing, Tampering, Repudiation, Information
Disclosure, Denial of Service, and Elevation of Privilege (STRIDE) classification scheme. The mitigation
techniques are based on the extended CIA triad (Clause 4) and are described generally to allow manufacturers
to determine the most appropriate algorithms and implementations.



General Information

CodeClassificationThemePagesPublisherAvailability
RS ISO/IEEE 11073-40102: 2022ADOPTED ISO STANDARDSMechanical systems and components for general use35First EditionAvailable
Price: RWF 28,500


View: All


View by: Classification


View by: Group
Agriculture ( 259 )
Metallurgy ( 126 )
Services ( 8 )
Testing ( 5 )
Rwanda Standards Board

© Rwanda Standards Board 2020  - All rights reserved

KK 15 Rd, 49; PO Box: 7099 Kigali-Kicukiro, Tel: +250 0788303492, Hotline: 3250, Email:info@rsb.gov.rw