Table of Contents
Advertisement
• An incident response plan detailing responsibilities and how to react and
recover from incidents, shall be in place. Staff involved in the incident
response plan shall be trained to respond appropriately and effectively.
• A formal user provisioning and de-provisioning process shall be
implemented to enable the appropriate management of access rights to
medical devices.
• Users shall be assigned unique accounts to medical devices.
• User access rights to medical devices shall be reviewed for appropriateness
and corrected as needed, at regular intervals not exceeding once a year.
DRY 3.4 | Introduction | 49
2602A EN 20191018 0826
Advertisement
Table of Contents
