Implementation of BS7799 standard on the PACS in hospital
Kelby K. Chan, K.S. Tong, Yii-Chieh Huang · 2005
We have implemented the information security management standard BS7799 on our hospital-wide picture archiving and communication system (PACS) for the filmless radiological service. Our PACS is a cacheless system and the image distribution is based on Web technology with limited Internet Protocol (IP) addresses. All x-ray modalities are designed and configured according to Digital Image and Communication in Medicine Standard (DICOM) to ensure the integrity of data transfer. A PACS forum includes senior management of the hospital, clinicians, radiologists, technologists, nurses, computer scientists, physicists and engineers to monitor the progress, work out the business continuity plan in case of contingency, and to make sure the compliance of the standard. Internal audits are conducted twice a year, surveillance audits are conducted by BSI. BS7799 certification was awarded to the hospital in April 2004. We share our experience of implementing the BS7799 standard and improvement of not only the patient data security issue but also the quality of PACS service to the clinical departments for the quality patient care.