Information assets and risk assessment
Define ownership, expected evidence, monitoring and escalation before relying on this control.
World time
Managed Services / COHSEW knowledge
Information Security
Protect the confidentiality, integrity and availability of information that supports safe operations.
Objective
What this area means for safer, healthier and more responsible operations.
Health records, laboratory data, certificates, supplier evidence and incident information all require controlled access and reliable availability. COHSEW supports risk-based information security management across people, process, technology and third parties.
COHSEW principleUse competent, risk-based assurance to prevent harm, verify control and support continual improvement.
Priority controls
Where organisations should focus.
Priorities must be adapted to the organisation, activity, location, affected people and applicable legal requirements.
Identity, access and secure configuration
Define ownership, expected evidence, monitoring and escalation before relying on this control.
Supplier, cloud and continuity controls
Define ownership, expected evidence, monitoring and escalation before relying on this control.
Incident response, privacy and assurance evidence
Define ownership, expected evidence, monitoring and escalation before relying on this control.
How COHSEW supports you
From risk question to measurable assurance.
Our specialists help organisations select proportionate methods, preserve independence and turn technical evidence into action.
- 01Classify critical and sensitive information
Agree the scope, accountable owner, evidence and success measures, then review effectiveness over time.
- 02Connect cyber risk with operational safety and resilience
Agree the scope, accountable owner, evidence and success measures, then review effectiveness over time.
- 03Test recovery, escalation and breach response
Agree the scope, accountable owner, evidence and success measures, then review effectiveness over time.
Authoritative guidance
Continue with the primary sources.
These external resources informed this page. Always confirm current national law, regulator guidance and contractual requirements for your location.
01ISO/IEC
ISO/IEC 27001 information security
Open official source ↗02ISO/IECISO/IEC 17025 laboratory competence
Open official source ↗03International Organization for StandardizationCertification and conformity assessment
Open official source ↗Information on this page supports awareness and programme design. It is not legal, medical or regulatory advice, does not reproduce the full text of any standard and does not replace competent assessment of your specific circumstances.
Need a programme for Information Security?