GB/T 28827.8-2022Information technology service—Operations and maintenance—Part 8: Hospital information system management requirements (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.

This document is Part 8 of GB/T 28827 "Operation and Maintenance of Information Technology Services". GB/T 28827 has released the following 7 part.

--- Part 1: General requirements;

--- Part 2: Delivery Specifications;

--- Part 3: Specifications for emergency response;

--- Part 4: Data center service requirements;

--- Part 6: Application system service requirements;

--- Part 7: Cost Metric Specification;

--- Part 8: Requirements for hospital information system management.

Introduction

GB/T 28827 "Information Technology Service Operation and Maintenance" is divided into 8 parts.

--- Part 1: General requirements. The purpose is to propose the basic elements of information system operation and maintenance, and to provide operation and maintenance services.

All kinds of organizations should have the conditions and capabilities in these elements, and guide suppliers to improve and enhance their operation and maintenance service capabilities. and provide the buyer with the basis for selecting and evaluating suppliers.

--- Part 2: Delivery specifications. The purpose is to provide the delivery management, delivery content, delivery involved in the delivery process of operation and maintenance services Provide guidance on methods and deliverables, which can be used as a basis for buyers to select suppliers, and can also be used as suppliers to improve the delivery of operation and maintenance services. Competency guide.

--- Part 3: Emergency response specifications. The purpose is to propose the basic process of emergency response and process management requirements to improve the organization The ability to respond to emergencies, identify hidden dangers in advance, solve problems in a timely manner, and reduce the possible adverse effects of emergencies.

--- Part 4: Data center service requirements. The purpose is to specify the object, service strategy, delivery content, etc. of data center operation and maintenance services.

Requirements, standardize the behavior of data center operation and maintenance service providers, improve service capabilities, and improve the work efficiency of data center operation and maintenance services.

--- Part 5: Desktop and peripheral equipment specifications. The purpose is to standardize the operation and maintenance of desktop and peripheral equipment service providers In order to improve service standardization and convenience, reduce security risks and operating costs.

--- Part 6: Application system service requirements. The purpose is to propose an application system operation and maintenance service model, and to specify the corresponding operation and maintenance Requirements for system design, delivery, operation, termination and evaluation.

--- Part 7: Cost metric specification. The purpose is to specify the method and process of operation and maintenance cost measurement, including the composition and Operational cost measurement process.

--- Part 8: Requirements for hospital information system management. The purpose is to guide the hospital information system service organization to improve and enhance its information System management capabilities.

This document undertakes the management requirements of GB/T 28827.1 "Information Technology Service Operation and Maintenance Part 1: General Requirements", combined with hospital information information system management requirements, and provide the hospital from the aspects of information system service planning, daily transaction processing, supplier management, communication and coordination, information security, etc.

The basic components of information system services, as well as the conditions and capabilities that various organizations that provide hospital information system services should have in these areas.

This document refines event management into multiple links, expands and refines configuration management and other parts, and emphasizes on industry characteristics.

Management requirements for supplier management, emergency response, etc. For the management specifications and requirements already mentioned in GB/T 28827, this document no more repetitions.

Chapter 4 of this document subdivides the incident management process into classification management, receipt management, dispatch management, execution management, evaluation management, review Management, and stipulates the content of the logs and records that should be generated by the 6 subdivision processes.

Chapter 5 of this document stipulates the work content that requires the joint participation of hospital leaders, information departments, and business departments, and determines the information related to informatization.

Departments stipulate common goals, contents, requirements, and determine responsibilities and guarantees.

Chapter 6 of this document stipulates that the supplier service is an integral part of the external service provided by the information department, and the information department is responsible for its management. control requirements.

Chapter 7 of this document clarifies that communication and collaboration are an important part of operation and maintenance activity management, and they run through all aspects of event processing.

Section, is the main method of forming part of the record, this chapter specifies the relevant management requirements for communication and coordination.

Chapter 8 of this document refines and extends configuration management, and refines and extends the operation and maintenance requirements of monitoring.

Chapter 9 of this document specifies the three elements required for hospital emergency management. emergency plan, backup and security, and related management of emergency personnel. content and requirements.

Chapter 10 of this document specifies the relevant management content and requirements that hospitals should focus on in network security management.

1 Scope

This document specifies the management requirements for the hospital's self-use information system in the process of planning, construction, operation and maintenance, continuous improvement, and safety assurance.

This document is applicable to the information technology service needs of hospitals in clinical, management, logistics, administration and other aspects.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.

GB/T 28827.1 Information Technology Service Operation and Maintenance Part 1: General Requirements

GB/T 28827.2-2012 Information Technology Service Operation and Maintenance Part 2: Delivery Specifications

GB/T 28827.3-2012 Information Technology Service Operation and Maintenance Part 3: Emergency Response Specification

GB/T 29264-2012 Information Technology Service Classification and Code

SJ/T 11693.1-2017 Information Technology Service Service Management Part 1: General Requirements

3 Terms and Definitions

GB/T 28827.1, GB/T 28827.2-2012, GB/T 28827.3-2012, GB/T 29264-2012, SJ/T 11693.1-2017 and the following terms and definitions apply to this document.