Lakeridge Health First Health-Care System in Canada to Earn ISO/IEC 27001:2022 and ISO/IEC 27701:2019 Certification, the Gold Standard for Information Security Management System and Privacy Information Management System Safety

Posted on Wednesday December 11, 2024

Durham Region – In a world where keeping patient information and data safe is more important than ever, Lakeridge Health is proud to announce it is the first* health-care system in Canada to earn both the prestigious ISO/IEC 27001:2022 certification and ISO/IEC 27701:2019 certification – the global gold standards for information security management and privacy information management systems.

“We’re thrilled that Lakeridge Health is the first health-care system in Canada to receive both ISO 27001 and 27701 certifications,” said Aaron Lam, Manager of Information Security, Lakeridge Health. “These certifications are testaments to our commitment to ensuring a safe and secure environment for patients and their families.”

The ISO/IEC 27001:2022 and ISO/IEC 27701:2019 designation provides Lakeridge Health with a proven framework for building, managing, and continuously improving its information security and privacy systems to keep sensitive information, like patient data, safe.

"Achieving ISO 27001 and 27701 compliance shows our strong commitment to creating a system that carefully manages and reduces data security risks," said Michael Cole, Director of Information Technology and Chief Information Security Officer, Lakeridge Health. "We're proud to meet these top standards for both information security and privacy management, ensuring that we protect sensitive information with the highest level of care and reliability."

Protecting an organization from becoming a victim of a cyber-attack requires a multi-layered approach that combines technology, processes, and people. The ISO/IEC 27001:2022 and ISO/IEC 27701:2019 is just one of several initiatives implemented at Lakeridge Health to strengthen cybersecurity and protect vital patient information and records.

“By being certified to ISO 27001 and 27701, Lakeridge Health is showing its commitment to implementing and maintaining the highest practices and principles for managing risks around data security and privacy,” said Dr. Ilan Lenga, Chief Information Officer and Chief Privacy Officer, Lakeridge Health. “With cyber-crime and ransomware attacks on the rise, ISO 27001 and 27701 offers a clear path forward helping Lakeridge Health to quickly identify, address, and manage vulnerabilities before they become threats.”

The ISO/IEC 27001 and 27701 standard promotes a holistic approach to information security and privacy—looking at everything from the team and policies to the technology used. By implementing this standard and framework, Lakeridge Health not only strengthens its defences against a potential cyber-attack, but also it builds “cyber-resilience” and drives operational excellence and preparedness for any cyber-related situation.

“We congratulate Lakeridge Health for its accomplishment to achieve both ISO 27001:2022 and 27701:2019,” said Pierre Dovala, Sales Director Canada, BSI Group Canada Inc. “The global digital landscape is changing, with core business practices now increasingly digitally reliant. BSI is proud to be a trusted partner as organizations respond to this. These certification achievements further demonstrate Lakeridge Health’s commitment to excellence in data security management and its dedication to establishing digital trust with its patients and stakeholders. The team should be very proud.”

About Lakeridge Health
With five hospitals, four emergency departments, three critical care units, a long-term care home, a full range of medical and surgical specialties, more than 20 community health-care locations and a state-of-the-art surgical centre within the Jerry Coughlan Health & Wellness Centre, Lakeridge Health offers some of the broadest and most comprehensive acute care, ambulatory care, and long-term care services in Ontario.

Lakeridge Health is also home to several regional specialty centres and services, including the Central East Regional Cancer Program, R.S. McLaughlin Durham Regional Cancer Centre, The Shoulder Centre, and eye care and chronic kidney disease services. Additionally, we are proud to serve our community with a full suite of inpatient, ambulatory, and community-based mental health and addictions services, and provide safe, high-quality, compassionate care in our state-of-the-art long-term care home, Lakeridge Gardens.

Lakeridge Health is redefining the future of health care through transformative research, dynamic academic partnerships, and groundbreaking clinical trials. With over 140 active studies, we’re at the forefront of advancing medical knowledge, expanding treatment options, and improving the lives of our patients. Our one-of-a-kind Queen's-Lakeridge Health MD Family Medicine Program is on the leading edge of training the next generation of primary care doctors. Each year, over 3,000 students and trainees are supported by the Lakeridge Health Education and Research Network (LHEARN). Through our innovative collaboration with Ontario Tech University, we’re also harnessing the power of Artificial Intelligence to revolutionize patient care. Together with our academic, community, and industry partners, Lakeridge Health is tackling the toughest health challenges and elevating the quality of care for the communities we serve.

Guided by our vision of One System. Best Health. and supported by a dedicated team of nearly 9,000 staff, physicians, and volunteers, Lakeridge Health is a proud member of the Durham Ontario Health Team (Durham OHT) and works in collaboration with the Durham OHT, as well as primary care, and community and government partners to foster a truly integrated, regional system of care. Together, we are focused on empowering people to live their best health and fostering an accessible, inclusive, and equitable environment for all.

About BSI Group Canada Inc.
BSI is a business improvement and standards company that partners with more than 77,500 clients globally across multiple industry sectors. BSI provides organizations with the confidence to grow by working with them to tackle society’s critical issues – from climate change to building trust in AI and everything in between - to accelerate progress towards a fair society and a sustainable world.

For over a century BSI has been recognized for having a positive impact on organizations and society, building trust and enhancing lives. Today BSI engages with a 15,000 strong global community of experts, industry and consumer groups, organizations and governments to deliver on its purpose by helping its clients fulfil theirs.

*Footnote:
Lakeridge is believed to be the first Canadian health care system organization to achieve both ISO 27001:2022 and 27701:2019 certification, based on a 2024 review of BSI clients and publicly available information on ISO 27001 and ISO 27701 certifications.

-30-

For more information, please contact:
Sharon Navarro
Manager, Public Relations and Digital Communications
T. 905-435-7889
snavarro@lh.ca