Information Security Policy

The purpose of the Policy is to protect the organization’s information assets from all threats, whether internal or external, deliberate or accidental.

The CEO has approved the Information Security Policy.

It is the Policy of the organization to ensure that:

Information should be made available with minimal disruption to staff and the public as required by the business process
The integrity of this information will be maintained
Confidentiality of information not limited to research, third parties, personal and electronic communications data will be assured
Privacy of information not limited to research, third parties, personal and electronic communications data will be assured
Regulatory and legislative requirements will be met
A Business Continuity Management Framework shall be made available and Business Continuity plans will be produced to counteract interruptions to business activities and to protect critical business processes from the effects of major failures or disasters. Business continuity plans should be maintained and tested
Information security education, awareness and training will be made available to staff
All breaches of information security, actual or suspected, will be reported to, and investigated by the relevant authorities not limited to System Administration and Incident Response team
Appropriate access control will be maintained, and information is protected against unauthorized access.
Policies, Procedures and Guidelines not limited to Information Security will be made available to support the Information Security Policy
Internal Audit Unit has direct responsibility for maintaining the Information Security Policy and involved with writing and/or managing the development of relevant policies, procedures and guidelines not limited to information security
All managers are directly responsible for implementing the Information Security Policy within their units, and for adherence by their staff.
Continual improvement of the information security management system.

It is the responsibility of each member of staff to adhere to the Information Security Policy.

Information security and privacy is managed through HealthRecon Connect’s Risk Management framework.

Policy will be communicated to internal organization and interested parties as appropriate

Information Security Policy

Talk to us today for a
complementary,
no-obligation benchmark
assessment and demo.

Talk to us today for a complementary, no-obligation benchmark assessment and demo.

Main

Resources

Clients

More

Meet Us for Dinner

Information Security Policy

Talk to us today for a complementary,no-obligation benchmark assessment and demo.

Talk to us today for a complementary, no-obligation benchmark assessment and demo.

Main

Resources

Clients

More

Meet Us for Dinner

Talk to us today for a
complementary,
no-obligation benchmark
assessment and demo.