This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

Difference between revisions of "HL7 WGM - Baltimore, Maryland, USA Security WG - AGENDA"

From HL7Wiki
Jump to navigation Jump to search
 
(43 intermediate revisions by 3 users not shown)
Line 1: Line 1:
===SECURITY WORKING GROUP SESSIONS===
+
==Approved Security WGM Agenda==
 +
*[http://www.hl7.org/documentcenter/public_temp_B8A16798-1C23-BA17-0CD8B7A9C2605770/brochures/wgm/HL7_WGM_20120702.pdf HL7 September 2012 WGM Onsite Guide]
  
[[Security|Back to Security Wiki: Meetings]]
+
*[http://www.hl7.org/documentcenter/public/calendarofevents/wgm/wgm092012/onsite_guide.pdf  Onsite Meeting Schedule & Hotel Guide]
  
'''DRAFT'''
+
*[http://gforge.hl7.org/gf/download/docmanfileversion/6948/9633/HL7SecurityWGMMinutesSeptember2012.docx Draft September 2012 Working Group Meeting Minutes - Baltimore, MD USA]
==Suggested Agenda Topics==
+
 
* '''Discuss Confidentiality and "isDocumentCharacteristic with MnM''' - [http://gforge.hl7.org/gf/download/docmanfileversion/6900/9540/Act.confidentialityCode%E2%80%9CisDocumentCharacteristic%E2%80%9D%3Dtrue.pptx Act.confidentialityCode "isDocumentCharacteristic" = true] is a RIM change from September 2009 RIM change, which may substantially limit use of confidentiality codes to Acts that are document or record instances for an Act in criterion mood.  Woody Beeler has offered to discuss this issue with the WG.  Need to find mutually acceptable time slot.
+
[[Security|Back to Security Wiki Meetings]]
  
 
{| {{table}}
 
{| {{table}}
Line 20: Line 21:
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
| Sunday||Jan 15||Q1|| 9:00-10:30||.||No Meeting||.||.
+
| Sunday||Sept 9||Q1|| 9:00-10:30||.||No Meeting||.||.
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
Line 32: Line 33:
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
| Monday||Jan 16||Q1|| 9:00-10:30||.||No Meeting||.||.
+
| Monday||Sept 10||Q1|| 9:00-10:30||.||No Meeting - Plenary||.||.
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
| ||||Q2||11:00-12:30||.||No Meeting||.||.
+
| ||||Q2||11:00-12:30||.||No Meeting - Plenary||.||.
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q3||1:45 -3:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
 
| ||||Q3||1:45 -3:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
||Joint with CBCC
+
||''' Joint with CBCC'''
CBCC-Security Joint Project Updates (5-10min each)
+
*VA/SAMHSA led ONC Data Segmentation for Privacy (DS4P) Pilot Demonstration
'''current, on-going projects'''
+
*HL7 Vocabulary Adoption and Availability for DS4P Implementation Guidance – Heather Grain, Vocab Cochair
*[http://wiki.hl7.org/index.php?title=EHR#Project_Information EHR-S Functional Profile for metadata excahnge for HIE]
+
*Other CBCC-Security Joint Project Updates (5-10 min each)
 +
 
 
||CBCC
 
||CBCC
||TBD
+
||CC Rm 340
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q4||3:30 -5:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]] ||
 
| ||||Q4||3:30 -5:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]] ||
'''NEW discussion items; NEW projects'''
+
'''Joint with CBCC – New discussion items and projects'''
*
 
*
 
 
*US and Intl Realm Report out  
 
*US and Intl Realm Report out  
 
 
||Security
 
||Security
||TBD
+
|| CC Rm 340
 
|-
 
|-
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
|  Tuesday||Jan 17||Q1|| 9:00-10:30||[[Image:business_med.gif|center|Business Meeting]]
+
|  Tuesday||Sept 11||Q1|| 9:00-10:30||[[Image:business_med.gif|center|Business Meeting]]
||Meeting
+
||'''Opening Security WG Meeting'''
 
* Introductions
 
* Introductions
 
* Approval of agenda
 
* Approval of agenda
 +
* Confirm approval of [http://gforge.hl7.org/gf/download/docmanfileversion/6821/9381/HL7SecurityMinutesVancouver2012MayTW21-05-2012.doc May 2012 WGM Minutes]
 +
* Reminder about Security Cochair Election – Trish Williams, Interim cochair, is running
 +
*Input to HL7 Comments to AHRQ RFI on Quality Measures [http://wiki.hl7.org/index.php?title=September_4,_2012_Security_Working_Group_Conference_Call  Discussed in Sept. 4 Security WG call minutes]
 
* Review of industry activities
 
* Review of industry activities
 
||Security
 
||Security
||TBD
+
||Guest Rm 647
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q2||11:00-12:30||[[Image:business_med.gif|center|Business Meeting]]
 
| ||||Q2||11:00-12:30||[[Image:business_med.gif|center|Business Meeting]]
||Meeting
+
||'''Security WG Review of Industry and SDO Activities Meeting'''
* Review of industry activities
+
* Review of industry and SDO activities
 
+
**US iEHR project for VA/DOD
 +
*[http://gforge.hl7.org/gf/download/docmanfileversion/6959/9650/EHRS_FM_R2_N1_C4_Glossary_2012MAY.pdf Review of EHR FM R2 Glossary Verbs], and [http://gforge.hl7.org/gf/download/docmanfileversion/6962/9653/EHRS_FM_R2-TI-2-1-Audit-Trigger-Metadata-Table2.xlsx Security and Privacy terminology ]– prep for Joint with EHR WG Wed Q1
 
||Security
 
||Security
||TBD
+
|| Guest Rm 647
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q3||1:45-3:00||[[Image:business_med.gif|center|Business Meeting]]
 
| ||||Q3||1:45-3:00||[[Image:business_med.gif|center|Business Meeting]]
||Meeting
+
||'''Security WG Project Meeting'''
* Security & Privacy Ontology - Tony
+
* Levels of Assurance – Bill Braithwaite
*  
+
* Healthcare Privacy and Security Classification System Ballot Reconciliation
 
||Security
 
||Security
||TBD
+
|| Guest Rm 647
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q4||3:30 -5:00||[[Image:business_med.gif|center|Business Meeting]]
 
| ||||Q4||3:30 -5:00||[[Image:business_med.gif|center|Business Meeting]]
||Meeting  
+
||'''Security WG Project Meeting'''
* Security & Privacy Ontology - Tony
+
* Healthcare Privacy and Security Classification System Ballot Reconciliation
*
+
* Security SOA Project (SSOA) Planning
*  
 
 
||Security
 
||Security
||TBD
+
|| Guest Room 647
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
| Wednesday||Jan 18||Q1|| 9:00-10:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
+
| ||||Q5|| 6:00-8:00||[[Image:business_med.gif|center|Business Meeting]]
||Joint w/ EHR
+
||'''DS4P Demo Meeting'''
* Review of the Metadata profile being developed based on EHR-S FM R2
+
* VA/SAMHSA led ONC Data Segmentation for Privacy Pilot Demonstration
*  
+
**DS4P IG Conformance Testing- Test Case Accomplishments
||EHR
+
*HL7 support for future DS4P requirements, e.g., HITECH Self-Pay, balloting of DS4P IG
||TBD
+
||Security
 +
||Constellation F
 +
|-
 +
|-valign="top"
 +
| Wednesday||Sept 12||Q1|| 9:00-10:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
 +
||'''Joint w/ EHR'''
 +
* Review of the Metadata profile based on [http://gforge.hl7.org/gf/download/docmanfileversion/6959/9650/EHRS_FM_R2_N1_C4_Glossary_2012MAY.pdf Review of EHR FM R2 Glossary Verbs] and [http://gforge.hl7.org/gf/download/docmanfileversion/6962/9653/EHRS_FM_R2-TI-2-1-Audit-Trigger-Metadata-Table2.xlsx Security and Privacy terminology]
 +
 
 +
'''SDWG Meeting'''
 +
*Discuss [http://gforge.hl7.org/gf/download/docmanfileversion/6964/9656/UseofexternalreferencesinConsolidatedCDA.pptx CDA External References and use of HL7 Privacy and Security Vocabulary in the ONC Data Segmentation for Privacy IG]
 +
 
 +
||EHR/SDWG
 +
||EHR Constellation E / SDWG CC Rm 344
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q2||11:00-12:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
 
| ||||Q2||11:00-12:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
||Joint w/ SOA
+
||'''Joint w/ SOA'''
* SOA Services Model
+
* Transition of PASS projects to SSOA Project
*  
+
* [http://gforge.hl7.org/gf/download/docmanfileversion/6946/9631/HL7HealthcareClassificationSystemandHSSPDataSensitivityandTaggingProject.pptx Coordination of HL7 Privacy and Security Classification System with HSSP Data Sensitivity and Tagging Project]
 
||SOA
 
||SOA
||TBD
+
||Charles
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
| ||||Q3||1:45 -3:00||.||No Meeting||.||.
+
| ||||Q3||1:45 -3:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center| Free Security Educational Session]]
|-
+
||'''Free Security Educational Session'''
 +
[http://www.hl7.org/documentcenter/public_temp_E99A4C44-1C23-BA17-0CC319E9981B00E1/brochures/wgm/HL7_WGM_20120702.pdf HL7 Baltimore site brochure] Course description -  page 13
 +
*Security Risk Assessment – John Moehrke
 +
||Security
 +
|| Constellation D
 
|-valign="top"
 
|-valign="top"
| ||||Q4||3:30 -5:00||.||No Meeting||.||.
+
| ||||Q4||3:30 -5:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center| Free Security Educational Session]]
|-
+
|| '''Free Security Educational Session'''
|-
+
[http://www.hl7.org/documentcenter/public_temp_E99A4C44-1C23-BA17-0CC319E9981B00E1/brochures/wgm/HL7_WGM_20120702.pdf HL7 Baltimore site brochure] Course description - page 13
 +
*Security and Privacy Domain Analysis Model and Ontologies – Bernd Blobel
 +
*HL7 SOA Security Functional Model, Role & Attribute Based Access Control, & leveraging of industry security standards for healthcare – Mike Davis
 +
*Privacy Consent Directive CDA - Trish Williams
 +
*Review of HL7 Privacy, Access, and Security Services (PASS) – Don Jorgenson
 +
||Security
 +
|| Constellation C
 
|-valign="top"
 
|-valign="top"
|  Thursday||Jan 19||Q1||9:00-10:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
+
|  Thursday||Sept 13||Q1||9:00-10:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
||
+
||'''Security WG Project Meeting'''
*  
+
* Use of Act/Role.confidentialityCode [1..*] for ABAC and long term data governance in iEHR – Kevin Coonan
*  
+
* Overview of All Security Projects for 3-Year Plan – including potential for new project to create an international data segmentation for privacy implementation guide for realm privacy policy profiling
*  
 
 
||Security
 
||Security
||TBD
+
||Guest Rm 847
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q2||11:00-12:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
 
| ||||Q2||11:00-12:30||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
||
+
||'''Security WG Project Meeting'''
*  
+
* Confidentiality and “isDocumentCharacteristic” – Woody Beeler, MnM Cochair
 +
* Data Segmentation Strategies for Legacy Systems – Mary Kay McDaniel, FM Cochair
 
||Security
 
||Security
||TBD
+
||Guest Rm 847
 
|-valign="top"
 
|-valign="top"
 
| ||||Q3||1:45 -3:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
 
| ||||Q3||1:45 -3:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
||
+
||'''Security WG Project Meeting'''
*  
+
* [http://gforge.hl7.org/gf/download/docmanfileversion/6913/9568/twISOStandardsRequestfromHL7SecurityandCBCCWG.xlsx Trish Williams' updated list of ISO privacy and security standards requested by Security WG]
 +
* Discuss WG call time changes to better support international participation – Trish Williams
 +
 
 +
* Potential November Harmonization Proposals – Kathleen Connor
 
||Security
 
||Security
||TBD
+
|| Guest Rm 847
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
 
| ||||Q4||3:30 -5:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
 
| ||||Q4||3:30 -5:00||[[Image:business_med.gif|center|Business Meeting]][[Image:Technical_med.gif|center|Technical Meeting]]
||
+
||'''Security WG Administration Meeting'''
 
* Co-Chair Administrative time (Charter review, items due to the Steering Division)
 
* Co-Chair Administrative time (Charter review, items due to the Steering Division)
 +
* Security WG 3-Year Plan
 
||Security
 
||Security
||TBD
+
|| Guest Rm 847
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
|  Friday||Jan 20||Q1|| 9:00-10:30||.||No Meeting||.||.
+
|  Friday||Sept 14||Q1|| 9:00-10:30||.||No Meeting||.||.
 
|-
 
|-
 
|-valign="top"
 
|-valign="top"
Line 156: Line 184:
 
|  
 
|  
 
|}
 
|}
 
 
 
[[Security|Back to Security Wiki Meetings]]
 
[[Security|Back to Security Wiki Meetings]]

Latest revision as of 05:37, 12 September 2012

Approved Security WGM Agenda

Back to Security Wiki Meetings

Day Date Qtr Time Session Type Event Session Leader Room
Sunday Sept 9 Q1 9:00-10:30 . No Meeting . .
Q2 11:00-12:30 . No Meeting . .
Q3 1:45 -3:00 . No Meeting . .
Q4 3:30 -5:00 . No Meeting . .
Monday Sept 10 Q1 9:00-10:30 . No Meeting - Plenary . .
Q2 11:00-12:30 . No Meeting - Plenary . .
Q3 1:45 -3:00
Business Meeting
Technical Meeting
Joint with CBCC
  • VA/SAMHSA led ONC Data Segmentation for Privacy (DS4P) Pilot Demonstration
  • HL7 Vocabulary Adoption and Availability for DS4P Implementation Guidance – Heather Grain, Vocab Cochair
  • Other CBCC-Security Joint Project Updates (5-10 min each)
CBCC CC Rm 340
Q4 3:30 -5:00
Business Meeting
Technical Meeting

Joint with CBCC – New discussion items and projects

  • US and Intl Realm Report out
Security CC Rm 340
Tuesday Sept 11 Q1 9:00-10:30
Business Meeting
Opening Security WG Meeting Security Guest Rm 647
Q2 11:00-12:30
Business Meeting
Security WG Review of Industry and SDO Activities Meeting Security Guest Rm 647
Q3 1:45-3:00
Business Meeting
Security WG Project Meeting
  • Levels of Assurance – Bill Braithwaite
  • Healthcare Privacy and Security Classification System Ballot Reconciliation
Security Guest Rm 647
Q4 3:30 -5:00
Business Meeting
Security WG Project Meeting
  • Healthcare Privacy and Security Classification System Ballot Reconciliation
  • Security SOA Project (SSOA) Planning
Security Guest Room 647
Q5 6:00-8:00
Business Meeting
DS4P Demo Meeting
  • VA/SAMHSA led ONC Data Segmentation for Privacy Pilot Demonstration
    • DS4P IG Conformance Testing- Test Case Accomplishments
  • HL7 support for future DS4P requirements, e.g., HITECH Self-Pay, balloting of DS4P IG
Security Constellation F
Wednesday Sept 12 Q1 9:00-10:30
Business Meeting
Technical Meeting
Joint w/ EHR

SDWG Meeting

EHR/SDWG EHR Constellation E / SDWG CC Rm 344
Q2 11:00-12:30
Business Meeting
Technical Meeting
Joint w/ SOA SOA Charles
Q3 1:45 -3:00
Business Meeting
Free Security Educational Session
Free Security Educational Session

HL7 Baltimore site brochure Course description - page 13

  • Security Risk Assessment – John Moehrke
Security Constellation D
Q4 3:30 -5:00
Business Meeting
Free Security Educational Session
Free Security Educational Session

HL7 Baltimore site brochure Course description - page 13

  • Security and Privacy Domain Analysis Model and Ontologies – Bernd Blobel
  • HL7 SOA Security Functional Model, Role & Attribute Based Access Control, & leveraging of industry security standards for healthcare – Mike Davis
  • Privacy Consent Directive CDA - Trish Williams
  • Review of HL7 Privacy, Access, and Security Services (PASS) – Don Jorgenson
Security Constellation C
Thursday Sept 13 Q1 9:00-10:30
Business Meeting
Technical Meeting
Security WG Project Meeting
  • Use of Act/Role.confidentialityCode [1..*] for ABAC and long term data governance in iEHR – Kevin Coonan
  • Overview of All Security Projects for 3-Year Plan – including potential for new project to create an international data segmentation for privacy implementation guide for realm privacy policy profiling
Security Guest Rm 847
Q2 11:00-12:30
Business Meeting
Technical Meeting
Security WG Project Meeting
  • Confidentiality and “isDocumentCharacteristic” – Woody Beeler, MnM Cochair
  • Data Segmentation Strategies for Legacy Systems – Mary Kay McDaniel, FM Cochair
Security Guest Rm 847
Q3 1:45 -3:00
Business Meeting
Technical Meeting
Security WG Project Meeting
  • Potential November Harmonization Proposals – Kathleen Connor
Security Guest Rm 847
Q4 3:30 -5:00
Business Meeting
Technical Meeting
Security WG Administration Meeting
  • Co-Chair Administrative time (Charter review, items due to the Steering Division)
  • Security WG 3-Year Plan
Security Guest Rm 847
Friday Sept 14 Q1 9:00-10:30 . No Meeting . .
Q2 11:00-12:30 . No Meeting . .
Q3 1:45 -3:00 . No Meeting . .
Q4 3:30 -5:00 . No Meeting .

Back to Security Wiki Meetings