The health ministry office about overall health industry information security level protection work notice

Who do we ensemble [2011] no. 1126

        All provinces, autonomous regions, municipalities directly under the central government health TingJu, xinjiang production and construction corps and the state plan health bureau, directly under the various units, each department authority department bureau people:

        Implementation of the national information security level and the ministry of health protection system about the health care industry information security level protection work instruction opinion "(who does hair [2011] no. 85, hereinafter referred to as the guiding opinion on), and to enhance the health industry information security ability and the level, ensure and promote the healthy development of health information, our ministry decided to carry out comprehensive information security level protection work. Now the matters related to notice the following:

        A, the specific content

        (1) to establish and perfect the mechanism of work. Each provincial public health administrative department as soon as possible to determine the information security level protection liaison work, establish and perfect the information technology security expert committee, and separately in December 2011 and 2012 30 April 30 days before the date of the expert committee member list and liaison submit our list.

        (2) limit submitted for the record. Each provincial health administrative departments in December 2011 to 30 days before the date of this region has the record for health information system of grading submit our situation.

        (3) finish grading work record. Health industry each unit in 2012 to May 30 complete the unit of information system of the grading work record.

        (4) develop security construction rectification work. Health industry units should according to the information system for the record to launch level assessment grading work, find security gap and risk potential, and with your own security needs, and make the security construction improvement scheme. In December 2015 to 30 completed before information security level protection construction rectification work, and through the level evaluation.

        Second, related requirement

        (1) health industry units should according to "follow standard, protection, industry guidance, apanage management, synchronous construction, dynamic perfect" principle, set up information safety protection level long-acting mechanism.

        (2) each provincial health administrative department must do to supervise the health industry in every unit in accordance with the guiding opinion on requirements in information security level protection work.

        (3) each provincial public health administrative department level protection liaison change, shall be submitted to the report.

        (4) each provincial health administrative departments in time to report to the work progress and every year in the fourth quarter of this region submit information security level protection work summary.

○ 2 one year December 7,