As long as any computer or computer-based equipment is going to be connected to your PACS network, make sure it is clean of any viruses or malicious software (malware).
Such an inspection should include:
a) computer-based modality equipment meant for evaluation
purposes
b) computers or laptops for diagnostic modality equipment
c) any other computer-based equipment
When purchasing new modality equipment, make sure the tender and maintenance contract covers the following:
a)ensure that the latest patch/update for the operating
system is tested and applied within x weeks of release
b)ensure that the latest security patch pertaining to the
operating system is tested and applied within x weeks of
release
The network needs to be monitored continuously. Departments should develop a patch management strategy to ensure that the vendor diligently performs whatever patches and updates are needed.
Requiring that all systems are locked down to run the minimum number of services required to fulfil their function.
Ensuring that all systems run appropriate ‘on access’ virus detection software that is maintained up to date.
Providing a centrally managed server for the automated distribution of software patches and updates onto client PCs. This service might also potentially update medical devices as part of the above strategy.
The use for firewalls between critical clinical and general networks.
Agreeing with suppliers on ways to prevent unauthorised use of workstations. This could include restricting workstations to allow image viewing but not allow image files, which may be infected, to be loaded onto network servers.
Other measures include using software which analyses the behaviour of servers, networks and desktops.
Implementing a procedure to ensure that third-party service providers adhere to hospital IT security requirements when connecting test equipment such as portable computers directly to scanners or other systems connected to the hospital’s IT network; such connections are a necessary part of normal service practice.
Back to main future