WHML.ORG’s published security policy is organized around confidentiality, integrity and availability. It discusses access control, encryption, backups, staff awareness and incident response. These are the policy’s areas of responsibility, not a declaration that this preview has been independently certified or that every measure described in the source has been verified.
Overview
The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards – and even then, i have my doubts.”
Gene spafford
Welcome to the cyber security policy section of WHML.ORG! Our commitment to protecting our digital infrastructure and your data from cyber threats. The World Health, Medical and Life Sciences Organization (WHML.ORG), founded in 2000 by professors, academics, scientists, and health professionals, operates in 9 different regions worldwide (Europe, Asia, Middle East, Africa, Oceania, the Caribbean, North America, Central America, and South America). WHML.ORG, headquartered in the Netherlands and registered with the Dutch Chamber of Commerce (KVK), is a non-profit organization that promotes information sharing and cooperation in health, medical and life sciences. This cyber security policy demonstrates WHML.ORG’s commitment to ensuring the security of information and systems to maintain its operations.
Purpose of the cyber security policy
WHML.ORG’s Cyber Security Policy has been developed to protect the organization’s information assets, defend against cyber threats, and prevent information security breaches. This policy defines the principles and practices required to ensure the security of WHML.ORG’s digital operations and the protection of users’ data.
Scope of the policy
This Cyber Security Policy covers all information systems, databases, networks, hardware, software, and associated information assets within WHML.ORG. In addition, all WHML.ORG employees, volunteers, members, business partners, and third-party service providers are obliged to comply with this policy.
Information security principles
Confidentiality
Information belonging to WHML.ORG must only be accessible by authorized personnel. Personal and sensitive information must be protected and secured against unauthorized access.
Integrity
The accuracy and integrity of information must be preserved. Unauthorized alteration or deletion of information must be prevented.
Availability
Information must be accessible to authorized users when needed. The continuity of information systems must be maintained.
Cyber security practices
Firewalls and Anti-Virus Software
The source identifies network filtering and maintained endpoint protection as security measures. Their configuration and status must be verified for the devices and hosting environment concerned; a policy statement alone does not confirm that every measure is installed or current.
Encryption
Protection during transmission and storage are separate responsibilities. The local development address uses HTTP; HTTPS protection depends on the actual deployment. The preview does not claim encryption of every stored personal record. Ask about the relevant environment and data category when confirming a safeguard.
Access Controls
Access follows authorized account and administrative roles. The current service restricts protected learning and certificates using account approval and the package’s confirmed payment state. Periodic review of accounts and staff permissions is an organizational responsibility, distinct from these implemented checks.
Backup and Disaster Recovery
The source calls for regular backups and recovery planning to support continuity. A working recovery arrangement needs an identified scope and evidence that it can be used; this preview does not certify that all operational data have a tested recovery process.
Security Training
Staff and volunteer awareness is part of the source policy. Training content, participants and delivery records should establish what has actually taken place; the policy description itself is not a training record.
Cyber threats and risk management
Risk Assessment
Identify information assets and relevant threats, prioritize the risks and determine appropriate action. The source describes regular assessment; an actual assessment should have a defined date, scope and responsible owner.
Cyber Threat Information
Current information about threats can inform preparation and response. The source includes threat-intelligence sources in its approach; it does not identify a particular monitoring service deployed by this preview.
Security Incident Management
The source framework covers detecting, responding to and reporting security incidents. Reports should identify the affected service and observed issue without circulating sensitive information. The current contact route does not establish a guaranteed response time or a continuously staffed security operation.
Legal and regulatory compliance
Data Protection Laws
The source refers to national and international data-protection requirements, including the GDPR. Applicability and compliance must be established for the actual processing and organization; mentioning a regulation is not evidence of compliance by this test website.
Cyber Security Standards
The source names ISO/IEC 27001 as a reference for information-security management. This reference does not establish certification. Any certification claim needs an identifiable certificate, issuing body, scope and validity period.
Monitoring and audit
Internal Audits
The policy framework includes reviewing security practices to identify gaps and improvements. An audit’s findings and agreed actions should be supported by an actual dated record rather than inferred from this description.
External Audits
Independent assessment can examine a defined security scope and the effectiveness of controls. The source’s description of external audit is not evidence that this preview has undergone one. Any published assurance should identify the assessor, period and report concerned.
User responsibilities
Compliance with Security Policies
Users must comply with WHML.ORG’s information security policies and procedures.
Password Security
Users must use strong and complex passwords and must not share their passwords with others.
Reporting Security Incidents
Users must immediately inform WHML.ORG’s security team if they detect any security breach or suspicious activity.
Applying Updates and Patches
Users must regularly apply updates and security patches to the software they use.
“WHML.ORG – protecting health in the digital age.”