<?xml version="1.0" encoding="UTF-8"?><toc><section id="sec_foreword"><title>Foreword</title></section><section id="sec_intro"><title>Introduction</title></section><section id="sec_1"><label>1</label><title>Scope</title></section><section id="sec_2"><label>2</label><title>Normative references</title></section><section id="sec_3"><label>3</label><title>Terms and definitions</title></section><section id="sec_4"><label>4</label><title>An outline of RMS security of medical devices and medical information systems</title><section id="sec_4.1"><label>4.1</label><title>Contents of RMS security of medical devices and medical information systems</title><section id="sec_4.1.1"><label>4.1.1</label><title>General</title></section><section id="sec_4.1.2"><label>4.1.2</label><title>RMS using a public switched telephone network</title></section><section id="sec_4.1.3"><label>4.1.3</label><title>RMS using the Internet</title></section></section><section id="sec_4.2"><label>4.2</label><title>Security requirement of RMS of medical devices and medical information systems</title><section id="sec_4.2.1"><label>4.2.1</label><title>General</title></section><section id="sec_4.2.2"><label>4.2.2</label><title>Security measures in RMS operation</title></section><section id="sec_4.2.3"><label>4.2.3</label><title>Contracts between HCF and RSC including 3rd parties</title></section><section id="sec_4.2.4"><label>4.2.4</label><title>Protection of personal information</title></section></section><section id="sec_4.3"><label>4.3</label><title>Roles of RSC and HCF</title></section></section><section id="sec_5"><label>5</label><title>Risk analysis</title></section><section id="sec_A"><label>Annex A</label><title>Use case of RMSs (informative)</title><section id="sec_A.1"><label>A.1</label><title>General</title></section><section id="sec_A.2"><label>A.2</label><title>Trouble shooting for outages</title></section><section id="sec_A.3"><label>A.3</label><title>Scheduled maintenance</title></section><section id="sec_A.4"><label>A.4</label><title>Software updating</title></section><section id="sec_A.5"><label>A.5</label><title>Performance monitoring</title></section></section><section id="sec_B"><label>Annex B</label><title>Example of risk analysis result of remote maintenance services (informative)</title><section id="sec_B.1"><label>B.1</label><title>Assets and Threats (Site: RSC Equipment)</title></section><section id="sec_B.2"><label>B.2</label><title>Assets and Threats (Site: RSC Internal Network)</title></section><section id="sec_B.3"><label>B.3</label><title>Assets and Threats (Site: External Network)</title></section><section id="sec_B.4"><label>B.4</label><title>Assets and Threats (Site: HCF Internal Network)</title></section><section id="sec_B.5"><label>B.5</label><title>Assets and Threats (Site: HCF Maintenance Target Devices)</title></section></section><section id="sec_C"><label>Annex C</label><title>Example of risk analysis criteria (informative)</title></section><section id="sec_bibl"><title>Bibliography</title></section></toc>