Health software and health IT systems safety, effectiveness and security — Part 2-1: Coordination — Guidance and requirements for the use of assurance cases for safety and security

This document establishes requirements and gives guidance on assurance case framework for healthcare delivery organizations (HDOs) and for health software and medical device manufacturers (MDMs) and can be used to support the communication and information transfer between all parties. An assurance case can be used to communicate information and knowledge about different risks to other roles.

This document establishes:

—???? an assurance case framework for HDOs and health software and MDMs for identifying, developing, interpreting, updating and maintaining assurance cases.

—???? one of the possible means to bridge the gap between manufacturers and HDOs in providing adequate information to support the HDOs risk management of IT-networks;

—???? best practice by leveraging ISO/IEC/IEEE?15026-2 and other standards to identify key considerations and for the structure and contents of an assurance case, e.g. iterative and continuous approaches;

—???? example structure, method and format to improve the consistency and comparability of assurance cases.

This document is applicable to all parties involved in the health software and health IT systems life cycle, including:

a)?????? organizations, health informatics professionals and clinical leaders specifying, acquiring, designing, developing, integrating, implementing and operating health software and health IT systems, for example health software developers and MDMs, system integrators, system administrators (including cloud and other IT service providers);

b)?????? healthcare service delivery organizations, healthcare providers and others who use health software and health IT systems in providing health services;

c)??????? governments, health system funders, monitoring agencies, professional organizations and customers seeking confidence in an organization’s ability to consistently provide safe, effective and secure health software, health IT systems and services;

d)?????? organizations and interested parties seeking to improve communication in managing safety, effectiveness and security risks through a common understanding of the concepts and terminology used in safety, effectiveness and security management;

e)<span style="font:

Edition	2025
Standard Part No	3
Published Date	2025
Published By	ISO/TS
Page Count	46

ISO/TS

ISO/TS 18973:2025

ISO/TS 14812:2025

ISO/TS 21310:2025

ISO/TS 25006:2025

ISO/TS 81346-101:2025

ISO/TS 21219-13:2025

ISO/TS 6892-5:2025

ISO/TS 15143-4:2025

ISO/TS 7815-2:2025

ISO/TS 81001-2-1:2025

ISO/TS 22726-2:2025

ISO/TS 23541-2:2025