WALK101 Obtains ISO 27001·27701... Strengthening Info Sec & Privacy Systems
WALK101 enhanced medical data security and privacy management systems to international standards by acquiring ISO 27001 (ISMS) and ISO 27701 (PIMS).
Hello, this is the WALK101 Newsletter.
In this issue, we deliver the news that WALK101 acquired ISO 27001 (Information Security Management System) and ISO 27701 (Privacy Information Management System) certifications. Medical data is a domain where 'safe protection' is as important as 'accurate analysis'. WALK101 is strengthening its trust foundation by building a security framework meeting global standards.
Core summary of this issue
- ► ISO 27001: International standard that systematically manages and operates information security risks
- ► ISO 27701: International standard extending the privacy protection system based on ISO 27001
- ► Strengthening responsiveness to demands of medical institutions/partners: Internalizing security and privacy requirements into operating processes
Why ISO 27001 and 27701 are important
In a medical institution environment, it must be possible to transparently manage 'who accessed what information, when, and how'. ISO 27001 requires information security governance and a control system at the organizational level, and ISO 27701 further specifies personal information processing principles and protective measures on top of that. That is, the core is that it has established a system to continuously maintain and improve 'security and privacy' not only in product features but across operations.
Operational points strengthened by WALK101
- ► Access control/Permission management: Defining access scope clearly from a role-based perspective
- ► Logs/Traceability: Strengthening traceability by recording key events (access/inquiry/processing)
- ► Data protection principles: Reflecting the principles of processing personal and sensitive information in internal operating procedures
- ► Operation check loop: Strengthening the continuous improvement mechanism including policies/procedures/education
Meaning from a hospital adoption perspective
This certification is a process of reinforcing the 'operational reliability' that hospitals and institutions look closely at when considering actual adoption. While expanding product lineups such as GMSM (musculoskeletal X-ray AI analysis) and Scandia (body surface analysis), WALK101 designs them so that security and privacy principles are consistently applied regardless of the adoption format (SaaS/On-premise/PACS integration).