Care Systems has achieved ISO/IEC 27001:2022 certification, the internationally recognised standard for information security management. For the aged care providers who trust our platform with their data every day, this is our commitment to security made independently verifiable.
What this certification means
ISO 27001 is the leading global standard for information security management systems. It is published by the International Organization for Standardization and sets out the requirements for establishing, implementing, maintaining, and continually improving how an organisation manages information security risk.
Importantly, this certification is not self-declared. It requires an independent, accredited certification body to assess the organisation’s security management system against the full set of ISO 27001 controls and confirm that those controls are implemented, effective, and subject to ongoing review.
Why this matters for vendor selection: For any organisation evaluating a software vendor, ISO 27001 certification provides independent assurance that the vendor has a mature, structured, and audited approach to protecting the information entrusted to them.
What it means for your organisation
When you use Care Systems, you are working with a vendor whose information security practices have been assessed and certified by an independent body. Our controls around data access, system security, incident management, business continuity, and supplier governance are not just documented; they are verified.
For aged care providers navigating their own governance and compliance obligations, our ISO 27001 certification provides a recognised and credible reference point. Many insurers, regulators, and enterprise procurement teams specifically request ISO 27001 certification as part of their vendor assessment process. We are pleased to be able to meet that standard.
How we maintain certification
ISO 27001 is not a one-time achievement. Maintaining certification requires ongoing internal audits, management reviews, and regular surveillance assessments by our certification body. Our information security management system is reviewed continuously, with formal assessments conducted in line with the standard’s requirements.
Our ISO 27001 framework underpins how we respond to identified risks and incidents, how we manage supplier and third-party governance, and how we run our annual penetration testing programme. All findings from internal audits, penetration testing, and external assessments are tracked and remediated within our information security management system.
Protecting what matters
Aged care providers manage some of the most sensitive information in the country: the health records, financial details, and personal circumstances of older Australians and the staff who care for them. The organisations that use our platform deserve to know that their data is in safe hands.
ISO 27001 certification is one of the most meaningful ways we can demonstrate that commitment. We are proud to have achieved it, and we take seriously the ongoing work required to maintain it.
If you have questions about our security posture or need documentation for your own governance purposes, please reach out to your account manager.
