Goodoc Obtains Information Security and Personal Information Management System Certification ‘ISMS-P’

Goodoc, the No.1 healthcare platform in Korea, announced on the 8th that it has become the first company in the digital healthcare platform industry to obtain the information security and personal information management system certification ‘ISMS-P (Personal information & Information Security Management System)’.

The ISMS-P certification is the highest-level security management system certification in Korea, overseen by the Ministry of Science and ICT and the Personal Information Protection Commission. To obtain the certification, a total of 101 audit procedures must be completed, including establishment and operation of management systems (16 items), protection measure requirements (64 items), and personal information processing stage requirements (21 items).

Given the platform’s nature of operating based on information from both medical institutions and patients, Goodoc has paid special attention to building a security system for personal information protection. The company has continuously advanced its system by expanding recruitment of experts in information security, internally forming an ICT security team, and adopting the latest security solutions in line with the development of information and communication technology.

The company explained that these various efforts, including conducting regular security training for employees to improve the efficiency of internally established security policies and system operations, have led to the achievement of the industry’s first ISMS-P certification for a medical platform.

Min-kyung Lee, Head of Business at Goodoc, said, “Since medical records require even higher security, the various personal information protection efforts that Goodoc has operated and implemented have been recognized as the first certified case in the industry. Going forward, we will continue to review and implement various measures to eliminate information leakage risks and build a systematic information protection system, thereby creating an optimized service environment based on safe personal information protection.”