Alwi Rudolf, Prowse Paul, Gaamangwe Tidimogo
Annu Int Conf IEEE Eng Med Biol Soc. 2020 Jul;2020:5623-5626. doi: 10.1109/EMBC44109.2020.9175347.
The integration of medical device systems and general hospital information technology (IT) infrastructure creates a medical device-IT network that requires patient-oriented cybersecurity risk management to ensure patient safety. This study discusses the roles of clinical engineering in taking initiatives in the implementation of the ISO/IEC 80001-1 risk management framework in a hospital environment. Further, we present lessons learned and clinical engineering opportunities in managing medical device cybersecurity, which include development of an integrated systems test lab.Clinical Relevance- This paper highlights Clinical Engineering's leadership role in implementing an effective risk management system for integrated medical device systems to reduce cybersecurity risks to enhance patient care and safety.
医疗设备系统与综合医院信息技术(IT)基础设施的整合形成了一个医疗设备-IT网络,这需要以患者为导向的网络安全风险管理来确保患者安全。本研究讨论了临床工程在医院环境中主动实施ISO/IEC 80001-1风险管理框架方面的作用。此外,我们还介绍了在管理医疗设备网络安全方面吸取的经验教训和临床工程机会,其中包括建立一个综合系统测试实验室。临床意义——本文强调了临床工程在为综合医疗设备系统实施有效的风险管理系统以降低网络安全风险、提高患者护理和安全方面的领导作用。