at SystemExperts, said the method must be thoughtfully adopted to be effective. "Many organizations want to have the feeling of security that comes from deploying two-factor authentication," Mackey said. "But the security of a system is completely dependent on how well that [authentication] was integrated into the application." For example, organizations might let users bypass two-factor authentication through a weaker entry point, Mackey said. The goal might be to allow users into a system when they don't have security tokens with them. But in that case, "it's not clear they have provided any security," he said. The Dutch national electronic patient record project is progressing slowly, but steadily. Sixty five doctors have been connected to the infrastructure so far. By the end of the year, this number will increase to 200. "We are confident that we can stick to our goal and have all 8,000 GPs using the national electronic patient record by the end of 2009," said Reina Kloosterman, head of health and social issues at the Dutch embassy in Berlin. She gave an update on the project at a regional eHealth event organised by the industry association IHK in Berlin. Kloosterman said two factors were critical for the success of the project. First of all, doctors would have to be connected to the infrastructure efficiently and without putting too much financial burden on them. And second, the public would need to be informed about the EPR and privacy issues would need to be addressed. The EPR in the