This standard standardizes the data security management process of medical equipment. Based on relevant national standards, it provides detailed guidance on the data security of medical equipment in terms of technology and management methods. It provides clear implementation requirements for how medical institutions should conduct information security control on medical equipment.