DIN EN ISO 27799:2026-03
Health informatics - Information security controls in health based on ISO/IEC 27002 (ISO 27799:2025); English version EN ISO 27799:2026
| Fecha edición: |
2026-03-01
En Vigor
|
|---|---|
| Idiomas disponibles: | Inglés, DE |
| Resumen: | This document provides information security controls, including implementation guidance, for health organizations. It is based on ISO/IEC 27002:2022 In addition to generic ICT equipment and software used in many other environments, the scope of this document includes software and systems specifically for healthcare, such as electronic health record systems and medical devices incorporating health software. Such medical devices can be programmed or programmable and can contain software, firmware or both. Other digital equipment (such as that for environmental and infection control, building management, and physical security), which can be used in premises where healthcare is provided, is also in scope. This document applies to information in all its aspects, whatever form the information takes (including text and numbers, sound recordings, drawings, images and video), by whatever means it has been acquired or captured, whatever means are used to store it (such as printing or writing on paper or storage electronically), and whatever means are used to transfer or exchange it (orally, by hand, by post, movement of storage media, direct links or networking). This document is for organizations of all types and sizes that provide healthcare or are custodians of personal health information for other reasons. The information that they are responsible for can be stored and processed in many possible ways and locations, including on premises or in the cloud, but remains in scope. This document applies to all physical settings where healthcare is intended to be delivered, such as hospitals, clinics and other locations or facilities designated for healthcare purposes such as ambulances and mobile imaging or diagnostic units. It also applies to care provided elsewhere, such as in residential premises. In addition to the range of settings, this document applies to all methods of service provision including remote or virtual healthcare. |
| Keywords: | Coded representation|Danger|Data processing|Data protection|Data security|Definitions|Information interchange|Information technology|Medical informatics|Medical sciences|Planning|Protection of information|Public health|Risk|Safety|Security management|Use |
| ICS: | 35.030 - Seguridad de la TI, 35.240.80 - Aplicaciones de las tecnologías de la información en la sanidad |
| CTN: | |
|
Equivalencia Internacional |
Idéntica ISO 27799:2025 Idéntica EN ISO 27799:2026 |
|
Reemplazo Normas |
Reemplaza a DIN EN ISO 27799:2025-02 Reemplaza a DIN EN ISO 27799:2016-12 |










