Estándares de ciberseguridad aplicables a los sistemas informáticos sanitarios para proteger los datos personales

Abstract

Technological progress has made it possible to electronically manage health-related data through computer platforms and systems to offer users better health services; however, the protection of personal data has not been considered of vital importance in the development of these software products. The objective of this paper is to analyze the cybersecurity standards that can be applicable to computer systems to protect health data in accordance with the current legal regulations on personal data protection in Ecuador. The research has a descriptive documentary approach, in it the analysis of cybersecurity standards and the Organic Law for the Protection of Personal Data was carried out to determine which ones can be applicable in the development of computer systems and comply with current legislation. The correct application of IT security or cybersecurity standards minimizes the risk of data breach, while allowing healthcare entities to comply with the Law and avoid sanctions.