Security

Leadership

• Bernd Blobel PhD - HL7 Germany
• Mike Davis - U.S. Department of Veterans Affairs
• John Moehrke - GE Healthcare IT

Governance

1. Security Decision Making Processes
2. Security Mission Statement
3. Security SWOT

Security Project Space

• Security & CBCC Work Group Response to Meaningful Use IFR
• Issue tracking, releases, documentation available at: HL7 Homebase Project
• Security G-Forge site
• Web page: Security Working Group Web Page
• Cookbook for Security Considerations - Instructions for HL7 standards authors and workgroup members
• Security and Privacy Ontology Project - Weekly updates to the draft Security & Privacy Ontology

Schedule

Weekly, Tuesday at 1 pm EST (10 am PST)

• Meeting - Audio and Web Meeting Access Information:

 Conference Audio: 770-657-9270, Access: 845692 
 (US Callers may also use: 888-321-4501)

  A new meeting link has been sent to the Security WG listserve. Thank you. 
Join the meeting (copy and paste link):  meet:sip:Suzanne.Gonzales-Webb@va.gov;gruu;opaque=app:conf:focus:id:3fbd1ba55ee74219abd26892264ddef6%3Fconf-key=7536

Make sure the Office Live Meeting client is installed before the meeting:
* I am connecting from inside the Corporation network
* I am connecting from outside the Corporation network

Upcoming Security Calendar

• January 2012 Working Group Meeting - San Antonio, Texas USA
• September 2011 Working Group Meeting - San Diego, California USA
• May 2011 Working Group Meeting - Orlando, Florida USA, Security WG Agenda DRAFT
• January 2011 Working Group Meeting - Sydney, Australia AGENDA
• October 2010 Working Group Meeting - Cambridge/Boston, Massachusetts USA, Security WG Agenda
• May 2010 Working Group Meeting - Rio de Janeiro, Security WG Agenda

Minutes and Agenda

• January 2012 WGM San Antonio
• December 27th, 2011 Security Working Group Conference Call - CANCELLED
• December 20th, 2011 Security Working Group Conference Call - CANCELLED
• December 13th, 2011 Security Working Group Conference Call
• December 6th, 2011 Security Working Group Conference Call
• November 29th, 2011 Security Working Group Conference Call
• November 22, 2011 Security Working Group Conference Call - CANCELLED
• November 15th, 2011 Security Working Group Conference Call
• November 8th, 2011 Security Working Group Conference Call
• November 1st, 2011 Security Working Group Conference Call

• October 25, 2011 Security Working Group Conference Call
• October 18,2011 Security Working Group Conference Call followed by CBCC call
• October 11, 2011 Security Conference Call followed by 2PM EST with CBCC call]
• October 4, 2011 Security Conference Call followed by 2PM EST with CBCC call]

• NO Meeting: December 21, 28; January 4, 11; Next scheduled meeting January 18, 2011
• December 14, 2010 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• December 07, 2010 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• November 30, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care
• November 23, 2010 Security Conference Call continues at 2pm EST with Community-Based Collaborative Care
• November 16, 2010 Security Conference Call continues at 2pm EST with Community-Based Collaborative Care
• November 9, 2010 Security Conference Call continues at 2pm EST with Community-Based Collaborative Care
• November 2, 2010 Security Conference Call continues at 2pm (EST) with Community-Based Collaborative Care Work Group Call
• October 26, 2010 Security Conference Call continues at 2pm (EST) with Community-Based Collaborative Care Work Group Call
• May 2010 Working Group Meeting - Rio de Janeiro AGENDA May 16-20

• 2011 Meeting Minutes - 2011 Security Conference Call - ARCHIVE to September 2011
• 2010 Meeting Minutes - 2010 Security Conference Call - ARCHIVE to October 2010
• 2009 Meeting Minutes - 2009 Security Conference Call - ARCHIVE to December 2009
• 2008 Meeting Minutes - 2008 Security Conference Call - ARCHIVE

 Security WG Meeting Minutes Template

Back to Meetings

Documents

• Final Refactored Confidentiality Codes Harmonization Proposal
• Final Act Policy Type Harmonization Proposal
• HL7 Publication Request for the Security and Privacy DAM DSTU
• Composite Security and Privacy Domain Analysis Model v1_r2 (post 2010May ballot reconciliation)
• Decision Making Practices (TBD)
• Requirement Analysis
  • Security Use Cases
  • Role-Based Access Control (RBAC) Use Cases
  • Security Glossary HL7 2008(c), Version 3 Std
• Documents on HL7 Project Homebase aka HL7 GForge
  • Role Based Access Control (RBAC) Role Engineering Overview, N1 Sept 2009 HL7 baltot site
  • HL7 RBAC Permission Catalog
  • HL7 RBAC Constraint Catalog
  • HL7 RBAC Role Engineering Process (supporting data)
  • HL7 RBAC Permission Catalog mapping to SNOMED CT (initial)
  • HL7 RBAC Permission Catalog mapping to SNOMED CT II
  • A Scenario driven Role Engineering Process for Functional RBAC Roles (RBAC Reference) G. Neumann and M. Strembeck A Scenario-driven Role Engineering Process for Functional RBAC Roles, proc. of the 7th ACM Symposium on Access Control Models and Technologies, pp 33-42, 2002

• Cookbook for Security Considerations-Instructions for HL7 standards editors and workgroups
• HL7 Document on OIDS from May 2009 ballot
• Draft Security DAM Diagram
• Security DAM use cases and their representation in the class diagram
• DRAFT Security DAM Value Sets - US Realm 12/01/2009

Approved Projects

• Security and Privacy Ontology Project Wiki
• RBAC Privacy and Authorization Terminology Project Scope Statement v0 2.doc joint with Community-Based Collaborative Care
  • Project Insight - Project Plan
• CDA R2 Implementation Guide for Privacy Consent Directives May 2010 joint with Community-Based Collaborative Care