Standards & Certifications

In 2023 we successfully passed an audit for two international information security standards: ISO 27001 and ISO 27799. The certificates we received are shown here in full, and their validity dates appear on them. We have not renewed them since, and therefore we do not present ourselves as currently certified.

What remains from the audit is the way we work. The procedures, policies and controls built for it are the ones we have worked by ever since, and CISO and DPO oversight continues in the company on an ongoing basis.

ISO 27001 - Information Security Management

The standard defines how an organization builds and maintains an information security management system: mapping assets and risks, written policies, access controls, incident handling, and periodic auditing of all of these. The audit examines that the procedures exist in writing, that they are implemented in practice, and that someone is responsible for them.

ISO 27799 - Information Security in Healthcare

The standard extends ISO 27001 to medical data, whose sensitivity and surrounding regulation are higher. It is relevant to our clients in the clinic and healthcare field, where patient data passes through systems we manage.

The Certificates from the Audit

The three certificates received in 2023, as they are. The validity dates appear on each certificate.

Professional Oversight in the Company

The two personal certifications of Lior Levi, who is responsible for information security and privacy at our company.

Chief Information Security Officer - CISO

Responsible for the security strategy, managing cyber risks, and implementing the policies that protect the information assets and critical systems. In practice: risk management, oversight of the information security policy, identity and access-permission management, response to cyber incidents, and building recovery and business continuity plans.

Data Protection Officer - DPO

Responsible for ensuring that the company operates in accordance with the requirements of privacy laws, including the Israeli Privacy Protection Law and the GDPR. The role includes supervising the processes for handling sensitive data, periodic review, training the teams, and ongoing advice on everything related to privacy.

Contacting the Data Protection Officer (DPO):
Lior Levi · Show email address · 072-2281396