Clinical Systems Security Implementing the BMA Policy and Guidelines

Summary

The Fisher Medical Centre is a highly computerised general practice based in Skipton, North Yorkshire. We decided to try to implement the BMA interim guidelines on maintaining security in computerised patient information systems. This paper outlines the management processes by which a modified set of the BMA guidelines have been implemented in our practice. We also assessed the effects of implementing the nine principles outlined in the BMA security policy document. We describe the problems that we faced, the solutions we found and some of the issues that we were unable to resolve.