HISF self-check


The Health Information Security Framework (HISF) survey provides a simple self-check on your organisation readiness to comply with the New Zealand HISO 10029:2015 standard and is relevant to any type of healthcare organisation, e.g. GP, Dentists, PHOs, DHBs.

An organisation that does not have a health information security policy cannot assure patients their information is being treated and protected appropriately. The HISF supports organisations preparation and maintenance of such a policy, provides advice about procedures and technical standards that need to be incorporated in a policy and sets out minimum requirements and desired goals at various levels of organisation operational complexity and risk.
Compliance with the framework’s risk management section is required from 1st July 2016 for any organisations managing health information.

The survey is designed as a simple (5-10 minutes) free assessment with questions inspired by the Patients First checklist. Your answers will generate an estimate of your organisation's risk exposure and alignment to HISF. An optional email report can be sent at the end of the survey with specific advice on improvements based on your answers.

This survey is intended to be only an awareness exercise and not a comprehensive guide on health information security or compliance purposes.
For professional advice on how you can protect health information and become HISF compliant please contact Medical IT Advisors.

NOTE: additional information for each question can be accessed by clicking on the icon

Privacy note:
We collect personal information from you, including information about your name, contact information, computer or network and any interactions with us.
We collect your personal information in order to provide information or services to you, to provide statistical information (not including personal information) to the government and other organisations, to administer and improve the performance of our service and websites, to comply with the law and for marketing and research purposes.
Starting the survey means you agree with us collecting this information.
Besides our staff, we share this information with third party agents and service providers in order to facilitate the operation, monitoring and management of the website and service.
Providing some information is optional. If you choose not to enter your contact information (name and email), you will still be able to use the service, but we will not be unable to send you the survey report with detailed recommendations by email.
We keep your information safe by storing it in password protected databases and only allowing certain staff access to it.
You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong or deleted. If you’d like to ask for a copy of your information, or to have it corrected or deleted, please contact us at [email protected]