Security

Leadership

• Bernd Blobel PhD - HL7 Germany
• Mike Davis - U.S. Department of Veterans Affairs
• John Moehrke - GE Healthcare IT

Governance

1. CBCC Decision Making Processes
2. Security Mission Statement
3. Security SWOT

Security Project Space

• Security & CBCC Work Group Response to Meaningful Use IFR
• Issue tracking, releases, documentation available at: HL7 Homebase Project
• Security G-Forge site
• Web page: Security Working Group Web Page
• Cookbook for Security Considerations - Instructions for HL7 standards authors and workgroup members
• Security and Privacy Ontology Project - Weekly updates to the draft Security & Privacy Ontology

Schedule

Weekly, Tuesday at 1 pm EST (10 am PST)

• Meeting - Audio and Web Meeting Access Information:

 Conference Audio: 770-657-9270, Access: 845692 
 (US Callers may also use: 888-321-4501)
 **NEW** LIVE MEETING LINK: Click to Join
https://www.livemeeting.com/cc/vaoi/join?id=HL7Security&role=present&pw=X%60w4~Xm

Upcoming Security Calendar

• May 2011 Working Group Meeting - Orlando, Florida USA, Security WG Agenda DRAFT

• January 2011 Working Group Meeting - Sydney, Australia AGENDA Draft
• October 2010 Working Group Meeting - Cambridge/Boston, Massachusetts USA, Security WG Agenda DRAFT

• May 2010 Working Group Meeting - Rio de Janeiro, Security WG Agenda

Minutes and Agenda

• May 10th, 2011 Security Conference Call
• May 3rd, 2011 Security Conference Call
• April 26, 2011 Security Conference Call
• April 19, 2011 Security Conference Call
• April 12, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• April 5, 2011 Security Conference Call - Agenda POSTPONED to April 12 Meeting
• March 29, 2011 Security Conference Call
• March 22, 2011 Security Conference Call
• March 15, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• March 8, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• March 1, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• February 22, 2011 Security Conference Call - Meeting CANCELLED
• February 15, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• February 8, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• February 1, 2011 Security Conference Call - Call Cancelled
• January 25, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• January 18, 2011 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• NO Meeting: December 21, 28; January 4, 11; Next scheduled meeting January 18, 2011
• December 14, 2010 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• December 07, 2010 Security Conference Call continues at 2PM EST with Community-Based Collaborative Care
• November 30, 2010 Security Conference Call continues at 2pm with Community-Based Collaborative Care
• November 23, 2010 Security Conference Call continues at 2pm EST with Community-Based Collaborative Care
• November 16, 2010 Security Conference Call continues at 2pm EST with Community-Based Collaborative Care
• November 9, 2010 Security Conference Call continues at 2pm EST with Community-Based Collaborative Care
• November 2, 2010 Security Conference Call continues at 2pm (EST) with Community-Based Collaborative Care Work Group Call
• October 26, 2010 Security Conference Call continues at 2pm (EST) with Community-Based Collaborative Care Work Group Call
• May 2010 Working Group Meeting - Rio de Janeiro AGENDA May 16-20

• 2010 Meeting Minutes - 2010 Security Conference Call - ARCHIVE to October 2010
• 2009 Meeting Minutes - 2009 Security Conference Call - ARCHIVE to December 2009
• 2008 Meeting Minutes - 2008 Security Conference Call - ARCHIVE

 Security WG Meeting Minutes Template

Back to Meetings

Documents

• Composite Security and Privacy Domain Analysis Model v1_r2 (post 2010May ballot reconciliation)
• Decision Making Practices (TBD)
• Requirement Analysis
  • Security Use Cases
  • Role-Based Access Control (RBAC) Use Cases
  • Security Glossary HL7 2008(c), Version 3 Std
• Documents on HL7 Project Homebase aka HL7 GForge
  • Role Based Access Control (RBAC) Role Engineering Overview, N1 Sept 2009 HL7 baltot site
  • HL7 RBAC Permission Catalog
  • HL7 RBAC Constraint Catalog
  • HL7 RBAC Role Engineering Process (supporting data)
  • HL7 RBAC Permission Catalog mapping to SNOMED CT (initial)
  • HL7 RBAC Permission Catalog mapping to SNOMED CT II
  • A Scenario driven Role Engineering Process for Functional RBAC Roles (RBAC Reference) G. Neumann and M. Strembeck A Scenario-driven Role Engineering Process for Functional RBAC Roles, proc. of the 7th ACM Symposium on Access Control Models and Technologies, pp 33-42, 2002

• Cookbook for Security Considerations-Instructions for HL7 standards editors and workgroups
• HL7 Document on OIDS from May 2009 ballot
• Draft Security DAM Diagram
• Security DAM use cases and their representation in the class diagram
• DRAFT Security DAM Value Sets - US Realm 12/01/2009

Approved Projects

• Security and Privacy Ontology Project Wiki
• RBAC Privacy and Authorization Terminology Project Scope Statement v0 2.doc joint with Community-Based Collaborative Care
  • Project Insight - Project Plan
• CDA R2 Implementation Guide for Privacy Consent Directives May 2010 joint with Community-Based Collaborative Care