The solution
Versicherung der Schweizer Ärzte (VA) now has an Information Security Management System (ISMS) according to ISO 2700x in place. It is based on an IT security strategy and an IT security concept.
Both strategy and concept are tailored to the needs of VA. They build pragmatically on the policies that already existed and therefore blend in perfectly with the established processes.
In future, the concept will serve as a reference for VA should questions arise regarding information security. With the ISMS, VA can be confident that it meets the applicable security requirements.