HISAC - Health Information Strategy Action Committee (logo)
Print this   Email this

Health Information Security Framework (HISF) 10029

Published in August 2009

The Health Information Security Framework (HISF) 10029, formerly known as the Authentication and Security Standard, is a set of standards prepared by an Expert Advisory Committee last year. It has been designed to support organisations and practitioners holding personally identifiable health information to improve the security of that information, so it can be produced, stored, disposed of and shared in a way that ensures confidentiality, integrity and availability. The HISF specifies the minimum policy standards and technical requirements to best enable organisations to achieve this.

The current HISF comprises two documents:


The third in the suite, the Technical Specifications Register (10029.3), will be developed by a body of technical experts.

The Health Information Security Framework recommends that a governance and management body oversee its implementation, that products and networks are accredited, and that there is on-going monitoring of security. A number of these structures and processes are not yet established. However the framework itself has been validated as a standard, and is therefore ready to be adopted by sector organisations.

For more information, contact HISO at standards@moh.govt.nz.

Back to Approved Standards
Page last updated: 26 August 2009