IS/IEC/TR 80001 : Part 2 : Sec 2 : 2012 Application of Risk Management for IT-Networks Incorporating Medical Devices Part 2-2 Guidance for the Disclosure and Communication of Medical Device Security Needs, Risks and Controls

ICS 35.240.80

MHD 17

Reaffirmed 2023

NATIONAL FOREWORD

This Indian Standard (Part 2-2) which is identical with IEC/TR 80001-2-2 : 2012 ‘Application of risk management for IT-networks incorporating medical devices — Part 2-2: Guidance for the disclosure and communication of medical device security needs, risks and controls’ issued by the International Organization for Standardization (ISO) was adopted by the Bureau of Indian Standards on the recommendation of the Health Informatics Sectional Committee and approval of the Medical Equipment and Hospital Planning Division Council.

The text of ISO Standard has been approved as suitable for publication as an Indian Standard without deviations. Certain terminologies and conventions are, however, not identical to those used in the Indian Standards. Attention is particularly drawn to the following:

a) Wherever the words ‘International Standard’ appear referring to this standard, they should be read as ‘Indian Standard’.

b) Comma (,) has been used as a decimal marker, while in Indian Standards, the current practice is to use a point (.) as the decimal marker.