We put security & data privacy first As we develop and deliver our solutions, we do our utmost to minimise the security risk and to protect patient data, also known as Protected Health Information (PHI). Improved security features are continuously added to new software releases, and we work closely with our customers to ensure that our solutions are integrated with the hospital infrastructure in-line with best practices. Company Culture Changing the culture of a company is never easy but it can be done if the general tone and direction comes from the top. The security & privacy mindset at Oneview has come from the top, with full commitment from senior management and the board of directors. We have a standing company objective to “Protect our customers and our brand by putting security first”. This has enabled security & data privacy to permeate their way into our company culture, so much so that words like security, data privacy, PHI, encryption and certificates are part of our daily parlance. In short, it is a collective responsibility shared by everyone in the company. Best Practices Secure Software Development Lifecycle Security and data privacy are integral to our Software Development Lifecycle (SDLC), from planning to production. Our SDLC includes principles and practices such as; privacy by design, threat modelling, peer code review, static code analysis, environment hardening, penetration testing (incl OWASP), monitoring & alerting. Data Classification For data classification we use the TLP protocol. This protocol is easy to understand and ensures that everyone understands how to treat data appropriately. 3rd Party Penetration Testing Our teams conduct penetration testing as part of the SDLC, however it is always best to have a fresh pair of eyes put it through its paces. We engage with a reputable 3rd party cybersecurity consultancy to conduct penetration testing and issue reports which we share with our customers. Certifications & Compliance As a global company, our Information Security Management System (ISMS) and Privacy Information Management System (PIMS) encompass security and data privacy regulations from around the globe, including GDPR, HIPAA & the Australian Privacy Act. ISO27001 & ISO27701 Oneview’s ISMS and PIMS are certified against the requirements of the ISO27001 and ISO27701 standards respectively. Certification and on-going surveillance audits are conducted by Certification Europe. HIPAA A BAA (Business Associates Agreement) is signed between Oneview and every customer which fall under the remit of HIPAA. The controls defined in the HIPAA Security and Privacy rules are included in our ISMS & PIMS to ensure that the appropriate technical, physical and administrative safeguards are in place. Partnerships Oneview is a Microsoft partner, in addition to our on-prem offerings, we offer our solutions on Microsoft’s Azure Cloud. Microsoft have invested heavily in the compliance of the Azure Cloud and there is a BAA in place between Oneview and Microsoft. +353 1 524 1677 hello@oneviewhealthcare.com SOLUTIONS Empower Patients & Families Manage Patient Experience Deliver Virtual Care CXP PLATFORM CXP Cloud Start CXP Cloud Enterprise CXP Enterprise On-Prem Use Cases Integrations Data Analytics RESOURCES Blog Articles Videos Whitepapers Case Studies COMPANY About Leadership News Contact Careers Investors Partners Environmental, Social, and Governance Security & Data Privacy Privacy Policy Copyright 2021 © We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies. However you may visit Cookie Settings to provide a controlled consent. Cookie settings ACCEPT REJECT