D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

[LUG] OT: Problems in Canada with electronic health systems

 

been following the thread on Opting out of the NHS system with interest.
Came across the following. I am sure the NHS system will be better
but...

http://www.vancouversun.com/health/health+security+report+withheld/2590803/story.html

Extract

Some sample findings from Doyle's 30-page report, one of two issued
recently on the government's mismanaged electronic health
initiatives. 

"No intrusion prevention and detection systems exist to prevent or
detect certain types of [online] attacks. Open network connections in
common business areas. Dial-in remote access servers that bypass
security. Open accounts existing, allowing health care data to be
copied even outside the Vancouver Coastal Health Care authority at any
time." 

More than 4,000 users were found to have access to the records in the
database, many of them at a far higher level than
necessary. 

"Almost all users have some access to confidential information about all
clients in the database. Many clients' full health information
is accessible to a large number of users. Team memberships are not up
to date, meaning that many unauthorized users could have access to
client records that they should not have."


-- 
Henry
Photocopies or faxes of my signature are not binding. 
This email has been signed with an electronic signature in accordance with 
subsection 7(3) of the Electronic Communications Act 2000.
Digital Key Signature: GPG RSA 0xFB447AA1 
Tue Mar 23 21:16:30 GMT 2010

Attachment: signature.asc
Description: Digital signature

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html