How Joy Strengthened Cyber Security and Compliance with Periculo
Industry
Digital Health
Challenge
Joy needed to meet key cybersecurity and compliance standards, including ISO 27001, NHS DSPT, and Cyber Essentials, to mitigate risks, protect sensitive data, and maintain credibility in the medical sector.
Results
Joy’s ongoing ISMS improvements, verified by annual audits, strengthened their security posture, enhanced commercial viability, and reduced cyber-attack risks.
Periculo's Solution
Security Managed Service
"Periculo's expertise was invaluable in achieving our cybersecurity goals. Their tailored approach and meticulous attention to detail ensured we met industry standards and secured our platform against potential threats. The support provided throughout the process was exceptional, and we are now better equipped to serve our clients securely."
Patrick Harding
CEO, JOY

About Joy
Joy is a digital platform designed to enhance preventative healthcare. It enables health and social care professionals to link clients to local services and track outcomes effectively. Joy provides several key products:
- Case Management System: Manages client information and daily activities.
- Marketplace: Connects clients to various local support services.
- Insights App: Offers analytics to measure health initiatives and identify gaps in service provision.
The platform integrates with existing clinical systems to streamline processes and improve care delivery.
The Challenge
Joy faced several cybersecurity challenges that posed potential risks to their operations. Their main hurdles included:
- The necessity to comply with ISO 27001 standards to unlock more commercial opportunities and win more contracts.
- Meeting the NHS Data Security and Protection Toolkit (DSPT) compliance requirements.
- Achieving Cyber Essentials certification to protect their platform from common cyber threats.
- Reducing risks that organisations in the medical sector typically face, such as data breaches and cyber-attacks.
Without addressing these challenges, Joy risked losing credibility, facing financial losses, and potentially compromising sensitive client information.
The Solution
Periculo brought its extensive expertise in cybersecurity to address Joy’s unique needs. Our tailored solutions included:
- Implementation of ISMS: We developed a robust Information Security Management System (ISMS) to ensure systematic management of sensitive information.
- Audit Preparation for ISO 27001: Our Virtual Information Security Manager service ensured Joy was always audit-ready, maintaining compliance with ISO 27001 standards.
- Penetration Testing: We conducted comprehensive penetration testing to identify and mitigate vulnerabilities in Joy’s platform.
- Cyber Essentials Certification: We guided Joy through the process of achieving Cyber Essentials certification, further strengthening their cybersecurity posture.
"The support provided throughout the process was exceptional, and we are now better equipped to serve our clients securely."
The Results
By addressing their unique challenges, Periculo enabled Joy to achieve CE+ certification, comply with ISO 27001, and enhance their overall security posture.