Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Best Practices and Security Considerations DocumentĀ 
This document outlines theĀ  Minimum Baseline Security Standard (MBSS) where the core security principles and best practices tailored specifically for OpenMRS implementations are defined. It covers essential areas including network security, server hardening, data protection, authentication and authorization.

Info

This work was contributed by IntelliSOFT Consulting Ltd. in September 2024 thanks to a generous grant from Digital Square for CyberSecurity improvement work, organized by OpenMRS Inc.

Table of Contents

Introduction 3

...

Table of Abbreviations and Acronyms

Abbreviation/Acronym

Full Form

GDPR

General Data Protection Regulation

HIPAA

Health Insurance Portability and Accountability Act

HSTS

HTTP Strict Transport Security

IDS

Intrusion Detection System

MFA

Multi-Factor Authentication

MBSS

Minimum Baseline Security Standard

OpenMRS

Open Medical Record System

SQL

Structured Query Language

SSH

Secure Shell

SSL/TLS

Secure Sockets Layer/Transport Layer Security

VLAN

Virtual Local Area Network

WAF

Web Application Firewall

XSS

Cross-Site Scripting

Introduction

The Minimum Baseline Security Standard (MBSS) is a foundational set of rules designed to safeguard information systems. It is a framework that provides a basic level of protection against cyber threats.

...