About CEN
The European Committee for Standardization is one of three European Standardization Organizations (together with CENELEC and ETSI) that have been officially recognized by the European Union and by the European Free Trade Association (EFTA) as being responsible for developing and defining voluntary standards at European level.
- |
Project
| Reference | EN ISO 27799:2008 |
|---|---|
| Title | Health informatics - Information security management in health using ISO/IEC 27002 (ISO 27799:2008) |
| Work Item Number | 00251184 |
| Abstract/Scope | ISO 27799:2008 defines guidelines to support the interpretation and implementation in health informatics of ISO/IEC 27002 and is a companion to that standard. ISO 27799:2008 specifies a set of detailed controls for managing health information security and provides health information security best practice guidelines. By implementing this International Standard, healthcare organizations and other custodians of health information will be able to ensure a minimum requisite level of security that is appropriate to their organization's circumstances and that will maintain the confidentiality, integrity and availability of personal health information. ISO 27799:2008 applies to health information in all its aspects; whatever form the information takes (words and numbers, sound recordings, drawings, video and medical images), whatever means are used to store it (printing or writing on paper or electronic storage) and whatever means are used to transmit it (by hand, via fax, over computer networks or by post), as the information must always be appropriately protected. |
| Status |
Withdrawn
|
| Reference Document |
ISO 27799:2008 (EQV)
|
| date of Availability (DAV) | 2008-07-01 |
| ICS | 35.240.80 - IT applications in health care technology |
| A-Deviation(s) | |
| Special National Condition(s) |
Legal
| Directive(s) | |
|---|---|
| Mandate(s) | |
| Citation in OJEU |
Implementation Dates
| date of Ratification (DOR) (1) | 2008-06-15 |
|---|---|
| date of Availability (DAV) (2) | 2008-07-01 |
| date of Announcement (DOA) (3) | 2008-10-31 |
| date of Publication (DOP) (4) | 2009-01-31 |
| date of Withdrawal (DOW) (5) | 2009-01-31 |
Relations
| Supersedes | |
|---|---|
| Superseded by | EN ISO 27799:2016 |
(1) Date of ratification (dor) date when the Technical Board notes the approval of an EN (and HD for CENELEC), from which time the standard may be said to be approved
(2) Date of availability (dav) date when the definitive text in the official language versions of an approved CEN/CENELEC publication is distributed by the Central Secretariat
(3) Date of announcement (doa) latest date by which the existence of an EN (and HD for CENELEC), a TS or a CWA has to be announced at national level
(4) Date of publication (dop) latest date by which an EN has to be implemented at national level by publication of an identical national standard or by endorsement
(5) Date of withdrawal (dow) latest date by which national standards conflicting with an EN (and HD for CENELEC) have to be withdrawn
(6) This list of normative references is purely indicative. The only official list of normative reference is the list of the published standard.
In the case of undated standard, a link to the last dated version is provided.
In the case of series, a link to each standard identified in the series is provided.
We also invite you to check (via the website) whether corrigenda and/or amendments shall be read in conjunction with the main standard.