BETTER CARE, S.L. (hereinafter, Better Care) is an entity that was born with the mission of connecting knowledge to achieve better patient care. The mission of Better Care is to provide innovative digital solutions that allow healthcare professionals to improve the quality of patient care, ensuring the protection and confidentiality of information at all times. Through a combination of cutting-edge technology and clinical knowledge, the company seeks to optimize medical decision-making and contribute to the efficiency of health systems.
Aware of the importance of information security, it has decided to implement a management system and subscribes to this policy.
Better Care establishes, defines and reviews objectives within its Information Security and Information Privacy Management System (SGSI/SGPI) aimed at improving its security, understood as the preservation of the confidentiality, availability, integrity, authenticity and traceability of your information and the personal data for which it is responsible, as well as the systems that support it, increasing the trust of our customers and other interested parties; together with compliance with all legal requirements, regulatory and contractual provisions that apply to it.
The design, implementation and maintenance of the ISMS and the SGPI will be based on the results of a continuous process of risk analysis and management, from which the actions to be carried out in the field of security are derived within the scope of your system, which is:
“Information systems that support the services:
• Design, development, deployment, updating and maintenance of medical software for the capture and monitoring of biomedical and instrumental signals.
• Integration and centralization of patient biomedical data for recording and subsequent analysis.”
The Management of Better Care will establish risk assessment criteria so that any scenarios involving an unacceptable level of risk are properly addressed.
The Management of Better Care is committed to the implementation, maintenance, and improvement of the ISMS, providing it with the necessary means and resources, and encouraging all staff to assume this commitment. To this end, Better Care will implement the measures required for staff training and awareness on information security. Likewise, when staff fail to comply with security policies, the Management reserves the right to apply disciplinary measures within the applicable legal framework, depending on the impact this may have on the organization.
Everything defined in this policy will be detailed and developed in the ISMS regulations and procedures, which will be integrated as much as possible with other management systems of the organization, sharing resources for optimization purposes and seeking the continuous improvement of efficiency and effectiveness in process management.
All users will be required to report security incidents following the guidelines established by Better Care.
This policy shall apply to all staff and resources within the scope of the ISMS and IPMS and will be communicated to all interested parties.