CESPHN achieves ISO certification across quality and information security standards

Central and Eastern Sydney PHN (CESPHN) has successfully achieved certification against two internationally recognised standards. These are the International Organisation for Standardisation (ISO) 27001:2022 for Information security, cybersecurity and privacy protection — Information security management systems, and ISO 9001:2015 for Quality Management Systems.

This achievement reflects CESPHN’s ongoing commitment to strong governance, continuous improvement, and the safe, effective, and responsible management of information.

Certification across both standards confirms that CESPHN has robust systems and processes in place to support high-quality service delivery, meet regulatory and stakeholder expectations, and protect the sensitive information entrusted to CESPHN.

ISO/IEC 27001:2022 is the global standard for information security management. It demonstrates that CESPHN takes a structured, risk-based approach to protecting information, including personal, clinical, and organisational data. This includes identifying risks, implementing appropriate controls, strengthening staff awareness, and continuously monitoring and improving information security practices.

ISO 9001:2015 provides a framework for consistently delivering services that meet community, partner and contractual needs, while supporting a culture of evaluation, accountability and improvement. For CESPHN, this means clearer processes, stronger documentation, and greater consistency in the way we plan, commission, and support primary health care across our region.

Achieving certification across both standards has required significant work across the organisation, including reviewing policies and procedures, strengthening risk management, improving internal systems, completing internal audits and undertaking independent external assessment.

CESPHN Chief Executive Officer Nathalie Hansen said the certifications are an important milestone for the organisation.

“These certifications demonstrate CESPHN’s commitment to quality, security and continuous improvement. They provide our partners, providers and communities with confidence that we have strong systems in place to deliver reliable services and manage information safely and responsibly.”

Maintaining certification is an ongoing commitment. CESPHN will continue to monitor, review and improve its systems to ensure they remain effective, responsive, and aligned with the needs of primary health care providers, partners, and the community.