Health software and health IT systems safety, effectiveness and security - Part 2-1: Coordination - Guidance for the use of assurance cases for safety and security

This document establishes requirements and gives guidance on assurance case framework for healthcare delivery organizations (HDOs) and for health software and medical device manufacturers (MDMs) and can be used to support the communication and information transfer between all parties. An assurance case can be used to communicate information and knowledge about different risks to other roles.

This document establishes:

- an assurance case framework for HDOs and health software and MDMs for identifying, developing, interpreting, updating and maintaining assurance cases.

- one of the possible means to bridge the gap between manufacturers and HDOs in providing adequate information to support the HDOs risk management of IT-networks;

- best practice by leveraging ISO/IEC/IEEE 15026-2 and other standards to identify key considerations and for the structure and contents of an assurance case, e.g. iterative and continuous approaches;

- example structure, method and format to improve the consistency and comparability of assurance cases.

This document is applicable to all parties involved in the health software and health IT systems life cycle, including:

a) organizations, health infor