Access control administration in healthcare applications.

The interconnection of information systems of different parties involved in healthcare applications leads to the need for information sharing across large-scale and highly distributed database systems. Applying appropriate access control policies in an effective and flexible way is a specific task for a number of local security officers that must operate according to a high-level access control administration system. The particular security requirements of healthcare information systems are reflected to the access control system, which must be flexible and dynamically adaptable to the daily activities. Decentralizing access control administration can be achieved in a uniform and consistent way when applying appropriate administrative rules and constraints. In this paper are presented the basic features of an access control administration model for interconnected information systems, as in the healthcare environment.

Perspectives for integrating human and environmental risk assessment and synergies with socio-economic analysis.

For more than a decade, the integration of human and environmental risk assessment (RA) has become an attractive vision. At the same time, existing European regulations of chemical substances such as REACH (EC Regulation No. 1907/2006), the Plant Protection Products Regulation (EC regulation 1107/2009) and Biocide Regulation (EC Regulation 528/2012) continue to ask for sector-specific RAs, each of which have their individual information requirements regarding exposure and hazard data, and also use different methodologies for the ultimate risk quantification. In response to this difference between the vision for integration and the current scientific and regulatory practice, the present paper outlines five medium-term opportunities for integrating human and environmental RA, followed by detailed discussions of the associated major components and their state of the art. Current hazard assessment approaches are analyzed in terms of data availability and quality, and covering non-test tools, the integrated testing strategy (ITS) approach, the adverse outcome pathway (AOP) concept, methods for assessing uncertainty, and the issue of explicitly treating mixture toxicity. With respect to exposure, opportunities for integrating exposure assessment are discussed, taking into account the uncertainty, standardization and validation of exposure modeling as well as the availability of exposure data. A further focus is on ways to complement RA by a socio-economic assessment (SEA) in order to better inform about risk management options. In this way, the present analysis, developed as part of the EU FP7 project HEROIC, may contribute to paving the way for integrating, where useful and possible, human and environmental RA in a manner suitable for its coupling with SEA.