This study aims to provide Cloud security practices for the healthcare sector and identify security aspects, including relevant data protection aspects, to be taken into account when procuring Cloud services for the healthcare industry. The set of general practices aims to help IT professionals in the healthcare security contexts to establish and maintain Cloud security while selecting and deploying appropriate technical and organisational measures. The identification of relevant threats and risks to Cloud services in the healthcare industry and security and data protection requirements are also covered by the scope of this report. Further objectives include the presentation of informative and practice-oriented use cases and their analysis of relevant threats and Cloud security measures.
Link: www.enisa.europa.eu