Skip to content

How Joy Strengthened Cyber Security and Compliance with Periculo

JoyLogo

Industry

Digital Health

Challenge

Joy needed to meet key cybersecurity and compliance standards, including ISO 27001, NHS DSPT, and Cyber Essentials, to mitigate risks, protect sensitive data, and maintain credibility in the medical sector.

Results

Joy’s ongoing ISMS improvements, verified by annual audits, strengthened their security posture, enhanced commercial viability, and reduced cyber-attack risks.

Periculo's Solution

Security Managed Service

"Periculo's expertise was invaluable in achieving our cybersecurity goals. Their tailored approach and meticulous attention to detail ensured we met industry standards and secured our platform against potential threats. The support provided throughout the process was exceptional, and we are now better equipped to serve our clients securely."

Patrick Harding

CEO, JOY

About Joy

Joy is a digital platform designed to enhance preventative healthcare. It enables health and social care professionals to link clients to local services and track outcomes effectively. Joy provides several key products:

  1. Case Management System: Manages client information and daily activities.
  2. Marketplace: Connects clients to various local support services.
  3. Insights App: Offers analytics to measure health initiatives and identify gaps in service provision.

The platform integrates with existing clinical systems to streamline processes and improve care delivery.

The Challenge

Joy faced several cybersecurity challenges that posed potential risks to their operations. Their main hurdles included:

  • The necessity to comply with ISO 27001 standards to unlock more commercial opportunities and win more contracts.
  • Meeting the NHS Data Security and Protection Toolkit (DSPT) compliance requirements.
  • Achieving Cyber Essentials certification to protect their platform from common cyber threats.
  • Reducing risks that organisations in the medical sector typically face, such as data breaches and cyber-attacks.

Without addressing these challenges, Joy risked losing credibility, facing financial losses, and potentially compromising sensitive client information.

The Solution

Periculo brought its extensive expertise in cybersecurity to address Joy’s unique needs. Our tailored solutions included:

  • Implementation of ISMS: We developed a robust Information Security Management System (ISMS) to ensure systematic management of sensitive information.
  • Audit Preparation for ISO 27001: Our Virtual Information Security Manager service ensured Joy was always audit-ready, maintaining compliance with ISO 27001 standards.
  • Penetration Testing: We conducted comprehensive penetration testing to identify and mitigate vulnerabilities in Joy’s platform.
  • Cyber Essentials Certification: We guided Joy through the process of achieving Cyber Essentials certification, further strengthening their cybersecurity posture.
"The support provided throughout the process was exceptional, and we are now better equipped to serve our clients securely."

The Results

Our efforts resulted in a continually improving ISMS, externally audited on an annual basis. This demonstrated Joy’s commitment to information security and significantly increased their commercial viability. Additionally, the robust security measures implemented reduced the risk of cyber-attacks, ensuring that Joy’s product remains secure. Our support also enabled Joy to respond confidently to customer RFPs, showcasing their dedication to cybersecurity.

By addressing their unique challenges, Periculo enabled Joy to achieve CE+ certification, comply with ISO 27001, and enhance their overall security posture.

 

Ready to get started?