Security for Safety

Security for patients, data and systems

When it comes to protecting hospitals, clinics and practice groups, we support our clients with a methodology based on the industry-specific security standard (B3S), which ensures the security of data, employees and patients in five phases.

The first phase comprises the inventory, which includes a modelling of the security-relevant components of the overall system and an audit of the security processes (ISO 27001 GAP analysis). In phase two, the structure of the information security management system (ISMS) is developed and initial procedures and processes are defined. We then use a detailed IT security risk analysis to identify the threats and security gaps in the system under review, both technically and in terms of infrastructure and processes. Based on this preliminary work, our experts formulate a catalogue of measures aimed at reducing risks and optimising the customer's Information Security Management System (ISMS). The final stage is the awareness phase, in which we train our clients' employees in all security-relevant aspects. In addition, we conduct internal audits for ISMS control.