Hercules Health is a SaaS EHR, not directly contracted to Te Whatu Ora. We appreciate the necessity to ensure we are fully complying with the latest in Cyber Security recommendations in conjunction with the Privacy Act and the Health Information Privacy Code.
We are currently seeking to understand our cybersecurity maturity across HISF & Essential Eight. We have engaged a security specialist as an ongoing part of our operations to maintain a continuous understanding of our cybersecurity posture and seek to be aligned with a threat informed program (ASD Essentials) as it evolves.
1. What cybersecurity guidance does Health NZ have specifically for a Care Planning, resident management system (Hercules Health) who is not directly contracted by Health NZ?
2. Is there a point of contact that Hercules Health can liase with in the future for any cyber related questions?
There is more clarity for those in Te Whatu Ora services however for those of us operating in aged care for example, it’s a little unclear?
Thanks for your help.