Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Project Description

Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector

Date Published: January 2018


Jennifer Cawthra (NIST), Kevin Littlefield (MITRE), Robert Niemeyer (MITRE), Sue Wang (MITRE), Kangmin Zheng (MITRE)



auditing; authentication; authorization; DICOM; life cycle management; physical security; privileged account management (PAM); provisioning management; user analytics; multifactor authentication; Picture Archiving and Communication System (PACS); access control;  ; encryption;  ;  ;  ; vendor neutral archive (VNA)
Control Families

Access Control; Audit and Accountability; Identification and Authentication; Risk Assessment; System and Communications Protection; System and Information Integrity


Project Description (pdf)

Supplemental Material:
Project Homepage

Related NIST Publications:
SP 1800-24

Document History:
01/23/18: Project Description (Final)