Privacy and Security
Security
Security features, procedures and processes are essential to protect the privacy of personal health information, while permitting health care professionals to access the information they need to make patient care decisions.
eHealth Ontario’s information security program implements security practices here at eHealth Ontario, and advocates best practices in the health care sector.
Our Privacy and Security Code of Conduct is the internal standard our staff follow.
Our Security Program
- Security Assurance – conducting of Threat and Risk Assessments on the people, processes and technologies at eHealth Ontario, as well as those of affiliated service providers and clients
- Security Solutions – designing, developing and implementing security solutions for internal and external clients
- Enterprise Security and Privacy Incident Management (ESPIM) – managing security incidents within eHealth Ontario
- Security Program – developing policies, standards and processes to achieve leading edge security
- Security Awareness and Training – ensuring that employees and clients are aware of their security roles and responsibilities
Our Security Policies
- Information Security Policy
- Media Disposal Standard
- eHealth Ontario Enterprise Security and Privacy Incident Management Operating Directive
eHealth Ontario product security features
Learn More About the Security Features of our Products
PKI Certification Manual (PDF)
Learn More About our Public Key Infrastructure Certification
Security Standards
eHealth Ontario information security program is based on international security standards ISO27001 and ISO27002 to provide best security protection for its products and services.The following are some industry guidelines regarding security protection and information technology that we use for our security program.
- Communications Security Establishment (CSE)
- Government of Canada – IT Security Technical Publications
- Information Security Forum (ISF) – The Standard for Good Practice for Information Security
- International Organization for Standardization (ISO)