Compliance

INFORMATION SECURITY MANAGEMENT

We strive to assure integrity of all information we disseminate, produce, and manage or store, which is duly handled through sound confidentiality procedures. This policy aims to protect our information assets from any internal, external, deliberate or accidental threats. To pursue the policy,

• All breaches of information security, actual or suspected, will be reported to and investigated by authorized persons including System Administrator and Incident Investigator;
• Information Security Management Committee is responsible for documenting and maintaining the Information Security Management System;
• All managers shall implement the policy within their units and ensure that every staff member adheres to the policy.

INFORMATION SECURITY POLICY

It is the policy of the Gravity Technology that all information it manages shall be appropriately secured to protect against the consequences of breaches of confidentiality, failures of integrity or interruptions to the availability of that information.

IT IS THE POLICY OF THE COMPANY TO ENSURE THAT:

• Information will be protected against unauthorised access
• Confidentiality of information is assured.
• Regularity and legislative requirements regarding Intellectual property rights, Data protection and privacy of personal information are met.
• Business Continuity plans will be produced, maintained and tested.
• All breaches of information security, actual or suspected are reported and investigated by the Security Policy Review Team.

HIPAA – Health Insurance Portability and Accountability Act of 1996

At Gravity Technology Healthcare, we respect the privacy and confidentiality of your protected health information (PHI). We are required by law to maintain the privacy of your protected health information including in electronic format. When we use the term “personal information” we mean information that identifies you as an individual such as your name and Social Security Number, as well as financial, health and other information about you that is non-public Providence Health Plan maintains policies that protect the confidentiality of personal information, including Social Security numbers, obtained from its members in the course of its regular business functions. This explains how we may use and disclose information about you in administering your benefits and it also informs you about your rights as our valued aspect.

Business continuity management (BCM)

Operational risk management is becoming increasingly important. Business processes are getting faster, more specialized and increasingly interlinked. If the supporting operating infrastructure fails, whether in IT, personnel or production, the consequences range from malfunctions to long-term outages or even loss of market share and corporate image. With a certification of your business continuity management you can increase the stability of business processes as well as reduce stoppage and recovery delays.

Trust in our experience and extensive expertise in the certification of crisis and emergency management systems. As a neutral provider of testing services we are the right partner for you and provide optimal assessment of your business processes. With us at your side, you are perfectly prepared for any emergency.