Rules implement policy

Rules implement policy

• Tight security policy:
  • simple rules
  • many requests/responses referred to security officer
  • much information output denied by security officer
  • low risk
  • poor public and community physician relations
• Liberal but careful security policy
  • complex rules
  • few requests/responses referred to security officer
  • of remainder, much information output denied by security officer
  • low risk
  • good public and community physician relations
• Sloppy security policy
  • simple rules
  • few requests/responses referred to security officer
  • little information output denied by security officer
  • high risk
  • unpredictable public and community physician relations

Gio Wiederhold TIHI Oct96 *

Previous slide

Next slide

Back to the first slide

View Graphic Version