Statement of Information Security Policy
At Lean Pharma Services, protecting sensitive medical information, patient safety data, and regulatory records is paramount. Our Information Security Management System (ISMS) aligns with ISO 27001:2022 to ensure confidentiality, integrity, and availability of all health-related data.


Commitments :

  • Compliance: We comply with ISO 27001:2022, GDPR, and vigilance regulatory requirements.
  • Access Control: We enforce role-based access controls (RBAC) and multi-factor authentication (MFA).
  • Data Protection: We apply encryption, secure storage, and validation procedures to protect data integrity.
  • Incident Response: We operate an incident response framework to mitigate security risks and ensure business continuity.
  • Continuous Improvement: We conduct routine security risk assessments and validation of computerized systems.

Objectives :

  • Maintain 100% data integrity and security compliance.
  • Conduct biannual security audits to enhance vigilance and medical information protection.
  • Implement automated real-time threat detection and response.
  • Provide mandatory annual cybersecurity training for all employees handling sensitive data.
Effective: 20-Jun-2025