Data security is a top priority for Quality Health and all elements of the survey process are undertaken in-house at our secure ISO 27001 accredited and tested premises. Once your data is securely transferred to us it does not go anywhere else. We receive and check samples from clients via our secure uploading facility which uses SSL encryption technology; produce covering letters; package and dispatch questionnaires using state of the art inserting machinery; provide an in-house helpline for patients and staff with specially trained operators; receive all post back, open and sort it; log and scan all questionnaires; have in-house trained verifiers who check the response data for duplicates and anomalies; deliver completed survey results and reports to clients. This system ensures the highest levels of data security and service to our clients.
Quality Health is also accredited to ISO 9001 standards, which governs quality measures, and ISO 27001 certification which governs data and information security management. These accreditations are reviewed annually by an external specialist auditor, and were last renewed in April 2010.
Quality Health also has IGSOC certification issued by Connecting for Health, covering all its relevant operations and NHS.net email.
Situated in purpose built premises secured to ISO 27001 compliant specifications, access to the building is by swipe card, as is entry to internal work areas; all swipe card entry is monitored both into and out of the building and logs are regularly checked and monitored.
Quality Health’s servers and other central IT equipment are situated in a separate secure room without external access, which can only be entered by specific senior staff whose swipe cards allow them to do so. An audit trail reporting access and entry patterns and behaviours is created by the IT system and all visitors have to sign in before entering restricted areas. Access to data and information is controlled by password access on a restricted basis through the IT Manager in line with the company’s Access Control Policy.