Security

Digitization

and cybersecurity

The Digitisation of every healthcare administration process has to be matched with proportionately sophisticated cybersecurity measures. Our technological supplier Wellola stores and backs up all data in secured, state-of-the-art AWS data-centers within the EU. Wellola stores & backs up all data in secured, state-of-the-art AWS data-centers in Ireland for our EU customers or UK for our UK customers.

This platform avails of third party 24/7/365 monitoring that takes advantage of the latest statistical mechanisms and machine learning to provide a premium quality control and risk management service. Thanks to its heterogeneous monitoring and logging systems, abnormal patterns of behaviour can quickly be identified and responded to.

Third party monitoring

A Hyper Text Transfer Protocol Secure (HTTPS) using a 256-bit Secure Socket Layer (SSL) certificate is used throughout the site ensuring a 2048-bit encryption at rest and in transit so that data is always safe when being transferred from any device to our servers. WebRTC, considered by industry professionals as the most secure VoIP solution, is how all video calls are made within the platform.

Encryption

The solution has been architected with the specialist support of Deloitte/ DNM, who are certified to both ISO27100:2013 and ISO20000-1:2011. With their hands-on experience in architecting, building & optimising architectures that follow the AWS Well-Architected Framework we can now offer enhanced levels of data security.

Secure by design

The supplier of this platform is independently ISO27001:13 certified,

an international standard that demonstrates a secure environment when managing all client information.

Data processing

AWS certification: ISO/IEC 27001:2013, 27017:2015, 27018:2019, ISO/IEC 9001:2015

Deloitte / DNM certification: ISO27100:2013, ISO20000-1:2011

Wellola certification: ISO27001:13

What is ISO?

ISO 27001 is the international standard which is recognised globally for managing risks to the security of information the supplier is holding. Certification to ISO 27001 allows the supplier to prove to their clients and other stakeholders that they are managing the security of their information. ISO 27001:2013 (the current version of ISO 27001) provides a set of standardised requirements for an Information Security Management System (ISMS). The standard adopts a process based approach for establishing, implementing, operating, monitoring, maintaining, and improving our ISMS.

The ISO 27001 standard and ISMS provides a framework for information security management best practice that helps organisations to:

✓ Protect client and employee information
✓ Manage risks to information security effectively
✓ Achieve compliance with regulations such as the European Union General Data Protection Regulation (EU GDPR)

By achieving certification to ISO 27001 the supplier reaps numerous and consistent benefits including:

• A system that keeps confidential information secure
• Reassurance to customers and stakeholders; confidence in how they manage risk
• The secure exchange of information
• Enhanced customer satisfaction and client retention
• Consistency in the delivery of our services and products
• Management and minimisation of risk exposure
• A culture of security