參考文獻

[1] GB/T 4754-2017 國民經濟行業分類

[2] GB/T 32920-2016 信息技術 安全技術 行業間和組織間通信的信息安全管理(IEC27010：2012；IDT)

[3] ISO/IEC Directives，Part 1， Consolidated ISO Supplement， 2016

[4] ISO 22600 Health informatics-Privilege-Management and access control

[5]] ISO/IEC 27011:2008 Information technology-Security techniques-Information Security management guidelines for telecommunications organizations based on ISO/IEC 27002

[6] ISO/EC 27017:2015 Information technology-Security techniques-Code of practice for Information Security controls based on ISO/IEC 27002 for cloud services

[7] ]ISO/IEC 27018:2014 Information technology-Security techniques-Code of practice for protection of personally identifiable Information（PII） in public clouds acting as PII processors

[8] ISO 27799:2016 Health informatics-Information securtity management in heath using ISO/IEC 27002