Information Security, Privacy and Quality 

Information security 

CESPHN is certified against the ISO 27001 standard for information security, cybersecurity, and privacy protection.  An independent, accredited certification body has verified that we conform to the requirements of the standard.  

Certification demonstrates that we have implemented a systematic approach to managing information security risks, including appropriate policies, controls, governance, and continuous improvement processes to protect the confidentiality, integrity, and availability of information.

Data breaches and information security incidents 

The CESPHN ‘Information Security Incident Assessment and Response Procedure’ outlines our approach to information security events and incidents, including data breaches. It enables us to respond promptly and mitigate harm if CESPHN experiences a data breach or suspects one. This procedure is a requirement of the Privacy Act 1988 under the Notifiable Data Breach Scheme. 

Privacy 

The CESPHN Privacy Policy provides guidance on legal obligations and ethical expectations regarding privacy. This policy outlines how CESPHN handles personal information and how we comply with our privacy obligations. 

Quality management  

CESPHN is also certified against the ISO 9001 standard for Quality Management Systems. Certification demonstrates a commitment to consistent service delivery, stakeholder satisfaction, continual improvement, and effective processes, providing assurance to stakeholders that quality is actively managed and regularly audited.