The article by Denley and Weston-Smith about implementing security in a hospital system is finally online in the BMJ: http://www.bmj.com/cgi/content/short/318/7194/1328 This shows that it can be done Ross