SFS Suomen Standardit

 

This document provides guidance on managing an information security management system (ISMS) audit programme, on conducting audits, and on the competence of ISMS auditors, in addition to the guidance contained in ISO 19011. This document is applicable to those needing to understand or conduct internal or external audits of an ISMS or to manage an ISMS audit programme.

 

This document specifies a means for communicating part or all of the electronic health record (EHR) of one or more identified subjects of care between EHR systems, or between EHR systems and a centralised EHR data repository. It can also be used for EHR communication between an EHR system or repository and clinical applications or middleware components (such as decision support components), or personal health applications and devices, that need to access or provide EHR data, or as the representation of EHR data within a distributed (federated) record system. This document will predominantly be used to support the direct care given to identifiable individuals or self-care by individuals themselves, or to support population monitoring systems such as disease registries and public health surveillance. Uses of health records for other purposes such as teaching, clinical audit, administration and reporting, service management, research and epidemiology, which often require anonymization or aggregation of individual records, are not the focus of this document but such secondary uses might also find the document useful. This Part 1 of the multipart series is an Information Viewpoint specification as defined by the Open Distributed Processing ? Reference model: Overview (ISO/IEC 10746-1). This document is not intended to specify the internal architecture or database design of EHR systems.

 

This document provides a privacy framework which:

— specifies a common privacy terminology;

— defines the actors and their roles in processing personally identifiable information (PII);

— describes privacy safeguarding considerations;

— provides references to known privacy principles for information technology.

 

This document is applicable to natural persons and organizations involved in specifying, procuring, architecting, designing, developing, testing, maintaining, administering, and operating information and communication technology systems or services where privacy controls are required for the processing of PII.

 

This document establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect personally identifiable information (PII) in line with the privacy principles in ISO/IEC 29100 for the public cloud computing environment. In particular, this document specifies guidelines based on ISO/IEC 27002:2022, taking into consideration the regulatory requirements for the protection of PII which can be applicable within the context of the information security risk environment(s) of a provider of public cloud services. This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which provide information processing services as PII processors via cloud computing under contract to other organizations. The guidelines in this document can also be relevant to organizations acting as PII controllers.

 

This document specifies protocols and reporting requirements for the subjective quality assessment of lossy decoded light field data. It defines viewing conditions, visualisation procedures, rating protocols, post-processing methods and reporting formats to obtain repeatable and comparable subjective results.

 

This document defines the syntax and an accompanying decompression process that is capable of representing bi-level, continuous-tone grey-scale, continuous-tone colour, or multichannel digital samples in a format representing nucleotide sequences for supporting DNA storage.

 

This document:

— specifies decoding processes for converting nucleotide sequences to reconstructed image data;

— provides guidance on encoding processes for converting source image data to the format representing nucleotide sequences.

 

 

This document outlines a core dataset designed for a concise dental data exchange intended to support continuity and coordination of care. It provides a conceptual framework for a Dental Patient Summary that can serve as the basis for implementation models. The content reflects an international perspective on organizing dental information for cross-border exchange. It offers guidance on the essential data elements that should be shared globally and proposes a standardized format for their representation. The document focuses on defining the structure of the data to be exchanged (“the what”) without prescribing the specific methods or technologies used for transmission (“the how”). It does not include guidance on operational workflows such as data entry, collection, summarization, or integration. Nor does it address the competencies required to perform those tasks. Furthermore, it is not intended as an implementation guide and does not cover the underlying technical infrastructure or the use of particular coding systems, data formats, or terminologies.

 

This document describes artificial intelligence (AI) concepts, applications, and implications including governance and management, for use by organisations within the context of project, programme, and portfolio management. This document supplements ISO 21500:2021 [1], ISO 21502:2020 [2], ISO 21503:2022 [3], and ISO 21504:2022 [4], and provides guidance for organizations to consider when adopting or looking to improve their use of AI technologies to support their project, programme, and portfolio management efforts in an accountable manner. This document also provides project, programme and portfolio managers with guidance on considerations for responsible AI use. These considerations encompass security and privacy, governance frameworks, ethics, bias, transparency, and other relevant factors. This document is applicable to any public, private or non-profit organization, as well as any type of project, regardless of purpose, delivery approaches, lifecycle model, complexity, size, cost, or duration.

 

 

This document specifies the principle, reagents and materials, apparatus, test procedure, calculation, precision statements, test result reporting, etc. for the determination of mineral oil content in triaryl phosphate ester turbine control fluids by saponification method. This document is applicable to determination of mineral oil content in triaryl phosphate ester turbine control fluids. The precision of this method is established for mineral oil content from 0,02 mass% to 8 mass% in triaryl phosphate ester, which can be referenced for other content ranges. Warning Some triaryl phosphate esters are labelled with GHS08 “Serious Health Hazards”. The user of triaryl phosphate esters shall study attentively the respective material safety datasheet and review the recommended precautions to be taken in link with the following hazard statements in the dedicated section of the datasheet: a)H360F May damage fertility. Wear protective gloves to avoid contact;b)H361D May damage the unborn child. This test is not recommended for pregnant individuals. If participation is unavoidable, adequate protective equipment is required to prevent any potential dermal contact;c)H351 Suspected of causing cancer. Use only in well-ventilated areas and wear appropriate respiratory and dermal protection;d)H341 Suspected of causing genetic defects. Wear complete protective equipment to avoid any physical contact.

 

 

This document outlines a core dataset designed for a concise dental data exchange intended to support continuity and coordination of care. It provides a conceptual framework for a dental data for exchange that can serve as the basis for implementation models.

 

The content reflects an international perspective on organizing dental information for cross-border exchange. It offers guidance on the essential data elements that should be shared globally and proposes a standardized format for their representation.

 

The document focuses on defining the structure of the data to be exchanged (“the what”) without prescribing the specific methods or technologies used for transmission (“the how”). It does not include guidance on operational workflows such as data entry, collection, summarization, or integration. Nor does it address the competencies required to perform those tasks. Furthermore, it is not intended as an implementation guide and does not cover the underlying technical infrastructure or the use of particular coding systems, data formats, or terminologies.

 

This document provides a description of the numbering system replacing the DOMES numbering (see Annex A). The document provides a proper and unique identification of the permanently instrumented stations, (e.g., those used in the production of the International Terrestrial Reference Frame (ITRF) and other similar stations) to the geodetic data producers and users, with special emphasis on the backward compatibility with existing DOMES numbers. It is expected to have a positive impact on interoperability issues when merging data from different communities. This document will: support interoperability among GNSS providers including Global Positioning System (GPS), GLObalnaya NAvigatsionnaya Sputnikovaya Sistema (GLONASS), BeiDou Navigation Satellite System (BDS), Galileo, NavIC (Navigation with Indian Constellation), and Quasi-Zenith Satellite System (QZSS); clarify the potential confusion between communities which have already adopted their own numbering systems; support the United Nations Committee of Experts on Global Geospatial Information Management (UN-GGIM) Global Geodetic Reference Frame (GGRF) resolution on global geodetic infrastructure.

 

This document extends the framework described in ISO/IEC 21617-1 (JPEG Trust Part 1 - Core Foundation) with watermarking capabilities for purposes such as content authenticity, provenance, integrity, intellectual property rights, and labelling. These extensions include aspects of an algorithm-agnostic embedding and extraction process, the signalling of the presence of a watermark, the structure of the watermark, evaluation criteria, and pointers to repositories containing additional information.

 

MPEG-4 audio reference software provides a normative decoder implementation for the iso:proj:76383ISO/IEC 14496-3:2019 standard. It is normative in the sense that the decoder will produce conforming output for any conforming bitstream. Conforming iso:proj:76383ISO/IEC 14496-3:2019 implementations are not expected to follow the algorithms or the programming techniques used by the reference software but may be used as a starting point for the implementation or for verification of conforming implementations. Although the decoding software is considered normative, it cannot add anything to the textual technical description included in part 3 of ISO/IEC 14496.

 

This standard establishes a normative definition of communication between personal telehealth insulin pump devices (agents) and managers (e.g., cell phones, personal computers, personal health appliances, set top boxes) in a manner that enables plug-and-play interoperability. It leverages work done in other ISO/IEEE 11073 standards including existing terminology, information profiles, application profile standards, and transport standards. It specifies the use of specific term codes, formats, and behaviors in telehealth environments, restricting optionality in base frameworks in favor of interoperability. This standard defines a common core functionality of personal telehealth insulin pump devices.

 

In the context of personal health devices (PHDs), an insulin pump is a medical device used for the administration of insulin in the treatment of diabetes mellitus, also known as continuous subcutaneous insulin infusion (CSII) therapy.

 

This standard provides the data modeling according to ISO/IEEE 11073-20601 and does not specify the measurement method.

 

Abstract: Within the context of the ISO/IEEE 11073 family of standards for device communication, this standard establishes a normative definition of the communication between personal strength fitness devices and managers (e.g., cell phones, personal computers, personal health appliances, and set top boxes) in a manner that enables plug-and-play interoperability. It leverages appropriate portions of existing standards including ISO/IEEE 11073 terminology and information models. It specifies the use of specific term codes, formats, and behaviors in telehealth environments restricting optionality in base frameworks in favor of interoperability. This standard defines a common core of communication functionality for personal telehealth strength fitness devices. In this context, strength fitness devices are being used broadly to cover strength fitness devices that measure musculo-skeletal strength-conditioning activities.

 

Keywords: medical device communication, personal health devices, strength fitness equipment

 

Within the context of the ISO/IEEE 11073 family of standards for device communication, ISO/IEEE 11073-10417:2017 establishes a normative definition of communication between personal telehealth glucose meter devices and compute engines (e.g., cell phones, personal computers, personal health appliances, and set top boxes) in a manner that enables plug-and-play interoperability. It leverages appropriate portions of existing standards, including ISO/IEEE 11073 terminology, information models, application profile standards, and transport standards. It specifies the use of specific term codes, formats, and behaviors in telehealth environments restricting optionality in base frameworks in favor of interoperability. This standard defines a common core of communication functionality for personal telehealth glucose meters.

 

Within the context of the ISO/IEEE 11073 family of standards for device communication, a normative definition of the communication between personal basic electrocardiograph (ECG) devices and managers (e.g. cell phones, personal computers, personal health appliances, and set top boxes) in a manner that enables plug-and-play interoperability is established in ISO/IEEE11073-10406:2012. Appropriate portions of existing standards including ISO/IEEE 11073 terminology and IEEE 11073-20601 information models are leveraged. The use of specific term codes, formats and behaviours in telehealth environments restricting optionality in base frameworks in favour of interoperability is specified. A common core of communication functionality for personal telehealth basic ECG (1- to 3-lead ECG) devices is defined. Monitoring ECG devices are distinguished from diagnostic ECG equipment with respect to support for wearable ECG devices, limiting the number of leads supported by the equipment to three, and not requiring the capability of annotating or analysing the detected electrical activity to determine known cardiac phenomena. ISO/IEEE 11073-10406:2012 is consistent with the base framework and allows multifunction implementations by following multiple device specializations (e.g. ECG and respiration rate).