November 27, 2012 CBCC Conference Call
Meeting Information
Attendees
- Kathleen Connor
- Mike Davis Security Co-chair
- Suzanne Gonzales-Webb CBCC Co-chair
- Adriane James
- Jim Kretz
- Richard Thoreson CBCC Co-chair
- Ken Salyards
- Serafina Versaggi
Agenda
- (05 min) Roll Call, Approve November 20 Minutes and Accept Agenda
- (45 min) Security projects - CBCC Collaboration - Healthcare Classification Scheme - Kathleen/Mike
- (05 min) Other items
Meeting Minutes
RE: CBCC Collaboration - Healthcare Classification Scheme - Mike/Kathleen - Mike walked the group through the Healthcare Classification Scheme document. The focus of the ballot is on labels. There are 3 categories of labels and 1 category of handling instructions. The confidential terms in HL7 are hierarchical. You have to have clearances for all of the compartments. These are the only policies that apply to labels. There are also context based controls – these relate to external factors for example the time of day. We call this the handling caveat. An obligation is kind of policy.
Mike went on to present and explain the field Descriptions: There are fields such as confidentiality, sensitivity, integrity (this term is commonly used to mean that the data has not been improperly modified by an unauthorized person. Ex. Can I trust this information?), compartment (this could be my care team or agent orange etc. the difference between this and sensitive is that sensitive is a perception about the information, but com is not perceived to be sensitive until it is entered into a patient record), handling caveat, classifier, derivative classifier, and declassification. For example there is a field of sensitivity and the tags would be the vocabulary of things that are sensitive. Tags are applied to the content. Tags are security labels.
Wrap up - Mike asked the group to review the suggested guidelines for use section of the document. Do the guidelines line up with the definitions of the labels? Are there some guidelines that are missing and need to be added etc.
