Quirónsalud Hospitals integrated into Sermas obtain the Madrid Excellent Cybersecure Place seal

The Quirónsalud Hospitals integrated into the Madrid public hospital network (Sermas) have obtained the Madrid Excellent Cybersecure Place identifier, which certifies the “strong commitment of this healthcare network -comprised of the university hospitals Fundación Jiménez Díaz (Madrid), Rey Juan Carlos (Móstoles), Infanta Elena (Valdemoro), and General de Villalba (Collado Villalba)- to digital protection, responsible management of technological risks, and building trust among its clients and partners,” as explained by the Quality Director of the Madrid hospital, Bibiana Navarro.

Specifically, as she pointed out, this distinction, in addition to the Madrid Excellent seal which the aforementioned four centers already possess, endorses the required level in them across six key areas that the organization considers essential to ensure an organization's digital protection: governance and commitment, risk management, incident management, continuity and resilience, security in digital suppliers, and training and awareness.

To assess the levels of advancement in these areas, Madrid Excellent has analyzed ten areas -Strategy, Ethics and Transparency, Results, Environment, Society, Employees, Clients, Suppliers, Management and Transformation, and Innovation- that make up the four foundations of its model: ‘Purpose’, ‘Planet’, ‘People’, and ‘Progress’.

Thus, in the first of the foundations, the evaluation report considers that “the ‘Purpose’, and particularly the area of Strategy, are the most developed aspects,” given that “it demonstrates the commitment to a healthcare model and organizational structure focused on improving health, the patient experience, and the efficient management of resources to increase the value provided, both to patients and to the organization,” which also highlights the risk methodology and controls over them.

Moreover, the evaluation highlights the availability of certified environmental management systems based on the ISO 14001 standard, energy efficiency according to ISO 50001, CeroCO2 certificate from ECODES, as well as numerous projects carried out in the four centers to reduce the carbon footprint in their analysis of the ‘Planet’ area. It also emphasizes the SIAP ON LINE project to facilitate patient access to Patient Care with less waiting time and shorter case management time, achieving quick responses without needing to go to the hospital.

The ‘People’ foundation, along with Purpose, has scored the highest among the Quirónsalud Hospitals integrated into the Sermas. In this section, the report mentions humanization initiatives such as the Digital Mental Health Screening projects in the four hospitals, HumanizaTEA at Rey Juan Carlos; Treasure Map at the Pediatric Emergency of Infanta Elena; or Coagulín at General de Villalba. It also highlights the CARE (Communication and Adequate Therapeutic) project, as well as its expansion to patients with chronic diseases, in addition to cancer patients, and the Digital Competence Evaluation Model, which includes an action plan that may contain training actions (all professionals in the healthcare network have access to the Quirónsalud University), and initiatives for performance improvement, recognition, or strengthening, among others.

Finally, the assessment concludes that the management of processes in general and of the healthcare processes in particular is another strength of the organization, as demonstrated by the advances in the projects Scribe, expanded in consultations, specialties, and professionals involved; and Power BI in Qualios, associated with processes (risks, dashboards, performance, humanization, etc.).

“In light of the evaluation conducted, it is concluded that the organization reaches a sufficient maturity level that justifies the granting of the Madrid Excellent Cybersecure Place identifier,” states the evaluation report.

Prior to this milestone, the four Quirónsalud Hospitals integrated into the Sermas already had an Information Security Management System based on the international standard ISO 27001, and were recognized as certified entities in the National Security Scheme (ENS) that certifies the protection of systems in terms of information and cybersecurity. Both elements, along with the guidelines from the National Cryptologic Center (CCN) and the corporate policies of Quirónsalud, form an Integrated Management System that enhances the trust in security governance, digital protection, and responsible management of technological risks of these centers and aligns with one of its strategic axes: to continue improving its internal processes to protect information and be more effective and efficient, concludes Navarro.