T/DE 3-2021 The technical requirements for hybrid cloud security for medical institutions

Scope

Scope: This document specifies the security technical requirements that medical institutions need to consider when choosing to deploy business applications using hybrid cloud computing technology, covering infrastructure security, virtual resource pool security, container security, data security (including patient privacy protection), identity and authorization management, secure operation and maintenance, and monitoring, as well as security-as-a-service components. This document applies to cloud service providers, cloud service partners, and cloud service maintainers who should follow the security technical requirements when providing hybrid cloud solutions, system development, deployment, and operation and maintenance for medical institutions. Main technical content: This document specifies the security technical requirements that medical institutions need to consider when choosing to deploy business applications using hybrid cloud computing technology, covering infrastructure security, virtual resource pool security, container security, data security (including patient privacy protection), identity and authorization management, secure operation and maintenance, and monitoring, as well as security-as-a-service components.

Development Information

Related Standards