Slides van Maarten Stultjens (Elephant Security). Hoe regel ik als ziekenhuis mijn autorisaties in een cloudomgeving? Gepresenteerd tijdens Privacy, Identity & Security (PIDS) seminar van Almere DataCapital, zie www.almeredatacapital.nl.

3. KeyTalk
PortalTalk

9. (source: KPMG)

10.  General privacy laws and specific laws apply
 All parties receiving data must be bound by professional secrecy (art. 458)
 Limit access to relevant information (art. 458)
 Explicit approval by patient required (art. 458)
 ICT standards on the exchange of health data apply (law 21-08-’08)
 Hospital file= medical file managed by Doctor + nursing file managed by Nurse (Law 07-08-’87)
 Patients rights (Privacy guaranteed), health professional obligations (management of access rights)
 Patient Consent is required within medical team, within organization, across organizations
 ISO27001 (Other standards: HIPAA)
 HL7 – std for exchange of health data
Sanctions: EUR 500-550K, imprisonment, health professional reputation
Applicable legislation (BE)

11.  IPad toegang tot HIS (vb. Epic)
 Onderzoeksdata (bv. Borstkanker: behandelen, genereren & combineren (big-)data, analyseren)
 Regionale samenwerking van ziekenhuizen (bv. AMC, Flevo)
 EPR (bv. Tandheelkunde: beeldmateriaal delen)
 Diagnostische centra (vb. Diagnostiek4U)
 Zorg op afstand (MAD Europe)
 Zelfstandige behandelcentra (vb. Obesitas, Diaboss)
 Artsen die voor meerdere ziekenhuizen werken
Dutch Cases

12. Health Professional requests a new
role .
For example EPR for a medical
treatment.
The patient approves or rejects the
request

20. KeyTalk protects your data in motion by providing secure access for
machine-to-machine communication and data transmissions between
devices, corporate networks and cloud applications. It prevents common
attacks such as man-in-the-middle.
Solution description
KeyTalk generates, distributes and installs short living client certificates
on the client device in a fully automated manner, leveraging your
existing authentication methodology. Optionally it uses the device
hardware characteristics to strengthen the authentication process.

21.  Secures corporate data in-motion over the internet
 Using short living certificate technology
 Identification of user’s trusted devices
 No change in user experience, no administration
KeyTalk secures your data-in-

22. PortalTalk Controls and Secures access to the cloud from any device,
anywhere and anytime.
Solution description
Elephant Security helps enterprises and institutions with the rapid
adoption of cloud applications while reducing IT costs and ensuring
compliance.
Elephant Security gives complete control to IT and Compliance
Management over user access to sensitive corporate cloud data and it
gives end-users convenient and secure access to a wide range of cloud
applications.

23. Corporate Client Admin
Corporate Network
Enterprise Admin
Portal
Enterprise Enterprise Cloud
Cloud Portal Connectivity
Readiness Services
PortalTalk provides & secures cloud