February 2nd 2010 Security Conference Call

Security Work Group Weekly Conference Call

Attendees

• Tabitha Albertson
• Bernd Blobel Security Co-chair, absent
• Bill Braithwaite, MD
• Steven Connolly
• Mike Davis Security Co-chair
• Suzanne Gonzales-Webb CBCC Co-chair
• Allen Hobbs
• Don Jorgenson
• John Moehrke Security Co-chair, absent
• Pat Pyette
• Cliff Thompson
• Richard Thoreson CBCC Co-chair
• Serafina Versaggi, scribe
• Tony Weida
• Craig Winter

Agenda

1. (05 min) Roll Call & Call for Additional Agenda Items
2. (55 min) Report Out from Phoenix Working Group Meeting
   • Elections
   • Status of Security & CBCC WG response to MU
   • Ballot reconciliation
     • Security DAM
     • CDA R2 Implementation Guide for Consent Directives
     • PASS-Alpha Access Control
   • New Projects
     • Security and Privacy Ontology Scope Statement
     • Security Domain Analysis Modeling Project Scope Statement
     • Medical Device Security in Distributed Systems Scope Statement (DRAFT)
     • Privacy Policy Templates

1. Action Items:

• Serafina to follow up with HL7 leadership to determine process for submitting WG response to MU IFR
• Team: please read MU IFR (focus on pages 81-94 and Table 2B) and provide comments at next Tuesday's meeting

2. Report Out from Phoenix WGM

Announcements - Elections

• John Moerhke elected Security Co-Chair
• Mike Davis re-elected Security Co-Chair
• Steve Connolly appointed Vocabulary Facilitator for Security WG

Status of Security & CBCCC response to MU IFR

• Deadline for response is March 15
• Mike noted that many in this committee are responding to the IFR from their parent organization’s perspective
• Bill Braithwaite reported that HL7 will be submitting a consolidated response for aspects of comments that are HL7 standards specific. An electronic process for submitting work group comments to the HL7 committee is reportedly to be established
• Serafina to check with HL7 leadership and will report back on process for submitting comments to HL7
• Please read MU IFR in advance of next Tuesday’s meeting and bring your comments

Ballot Reconciliation

• Security DAM ballot resolution took place in joint session with Security, CBCC and SOA WGs
  • Comments disposed at the WGM.
  • Security list notification sent on 1/27/2010, and consolidated ballot comments/vote posted on GForge
• CDA R2 IG For CD –comments resolved during WGM
• SOA – PASS Access Control ballot –comments resolved during WGM

New Projects

• Medical device security in distributed systems
  • Scope statement crafted during the meeting
  • Health Care Devices (HCD) to sponsor; Security WG will co-sponsor along with other WGs
  • Scope statement will be sent to HCD for approval for September 2010 ballot