Online Reporter
Ivan Zhakata
Herald Correspondent
Cimas Health Group has upgraded to the ZWS ISO/IEC 27001:2022 certification, a globally recognised information security standard that strengthens the protection of members’ and clients’ data.
The latest certification marks a significant transition from the ISO/IEC 27001:2013 standard, which the group previously attained as part of its digital transformation programme, becoming the first medical services provider in Zimbabwe to achieve that milestone.
Cimas Health Group chief executive, Mr Vuli Ndlovu, said the development reflects the organisation’s commitment to confidentiality, integrity and operational excellence.
“The ISO/IEC 27001:2022 certification reflects our alignment with internationally recognised standards and demonstrates our dedication to robust information security management,” he said.
Mr Ndlovu said the group implemented major upgrades to its information technology infrastructure and strengthened key security processes, including staff training, risk assessments and governance frameworks, to meet the new standard.
The processes were subjected to a rigorous audit by the Standards Association of Zimbabwe at the group’s head office in Borrowdale, Harare.
He said the certification confirms that Cimas operates a world-class Information Security Management System (ISMS) designed to safeguard the security, integrity and confidentiality of members’ and clients’ information.
Mr Ndlovu said the organisation has also established comprehensive cyber-incident detection, response and management systems to effectively monitor and address potential threats.
He said the ISMS governs how technology, personnel and internal processes handle sensitive data, ensuring it is securely managed across the organisation.
The certification assures members, partners and stakeholders that their information is handled in line with internationally recognised best practices.
Mr Ndlovu said the group values the private, confidential and privileged information entrusted to it and has put in place rigorous control measures to ensure it remains fully protected.
