Information security

Certification of the Information Security Management System(ISMS) : 2015. 9

• Strengthening the social responsibility for the customer information
• Planning the ex-ante and ex-post measures against the infringement of the personal information
• Establishing mechanism for organic cooperation and collaboration by and between the cyber safety center for the health welfare and the integrated control center for the personal information
• Strengthening the ex-ante and ex-post control via the monitoring of the misuse and abuse of the personal information
• Complying with all regulations, such as implementing measures to secure the safety for the protection of the personal information

Personal Information Management System (ISMS Certificate)

September 2015

Encryption of the personal infomration

• The personal information in the major information systems, such as the health, the childcare, and the social service, is encrypted and manages it safe. This aims at protecting the valuable personal information.

The integrated control center of the personal information for the health and the welfare

The “integrated control for the personal information”, protector of the personal information of the health welfare area

• The integrated control business for the personal information of the Ministry of Heath and Welfare and its affiliated institutions (24 institutions and 128 systems) is carried out to ensure the prevention of the leakage, misues, and the abuse of it

The “support for the protection of the personal information”, a helper of the personal information for the health welfare area

• The center supports the protection activities of the personal information for the Ministry of Health and Welfare and its affiliated institutions, consulting, the investigation of the status quo of the management level, checks if they have the personal information or not.

The “institution specializing in the measures of unidentifying the personal information” in the health welfare area

• SSiS is an institution specializing in the measures of unidentifying the personal information in the health welfare area, and seeks the harmonization between the big data industry and the personal information protection.

System-specific consultation and training

Providing the consultation services which are “prompt, precise, and kind”

• The expert consultation services are provided to solve the matters of inconvenience while using the systems.

Systematic provision of the training customized to users

• The on and offline training is carried out to enhance the level of the use of the system and the utilization for business.