Votre question concerne quel type d'offre ?
Votre question concerne quel couloir Ségur ?
Votre question concerne quel dispositif Ségur ?
Votre question concerne quel produit ou service produit?
Votre question concerne quelle thématique ?
All the rules are set out in the HDS certification – Accreditation reference system and the COFRAC’s "Exigences spécifiques pour l’accréditation des organismes procédant à la certification de systèmes de management dans le domaine des technologies de l’information" (Specific requirements for structures that certify management systems in the information technology sector), available in our Documentation section.
To find out more about the list of certified and accredited bodies, click on the links below.
Cette réponse vous a-t-elle été utile ?
There are 6 types of activities that make you eligible as a health data host:
- providing and monitoring the operations of a physical site that hosts the material infrastructure of the IS used to treat health data;
- providing and maintaining the structural material used by the IS to host health data;
- providing and maintaining a platform that hosts the IS applications;
- providing and maintaining a digital structure for the IS which hosts health data;
- the administration and exploitation of the IS which contains the health data;
- health data backup services.
The full list of HDS-certified activities is available here:
Cette réponse vous a-t-elle été utile ?
The accountability framework defines the means that can be used to:
- ensure traceability of actions carried out in relation to a healthcare IS;
- guarantee the value of recorded traces;
- control the use made of this healthcare IS.
Cette réponse vous a-t-elle été utile ?
Health CERT operates on weekdays between 9am and 6pm. Aside from these working hours, it is possible to contact the ANSSI to signal risks.
CERT Santé
+33 (0)9 72 43 91 25
Agence du Numérique en Santé
9 rue George Pitard, 75015 Paris
Cette réponse vous a-t-elle été utile ?
Yes. The ANS has a video platform with training material, including cybersecurity support. You will find information about cybersuveillance auditing, how to signal a security risk, how to increase your password security, and how to identity malicious email.
Cette réponse vous a-t-elle été utile ?
The evaluation is done in two phases. It is conducted by the certifying body, which must verify the compliance with the certification requirements set out in the HDS Certification document (available below).
The audit also verifies the specific requirements for health data hosting are being met.
Cette réponse vous a-t-elle été utile ?
Your application needs to be complete and signed, with all the following documents:
- the MDPH label rules, which describes the labelling process
- the convention regarding the use of the label, which defines the procedures that take place after the label is granted. For example: obligations tied to the label, audit visits, cases of modifying the label, etc.
- the annexes to the convention;
- the license of use for the labelled solution;
- the insurance security plan for the conformity checks relating to the MDPH label;
- if applicable, the decisions issued by partner organisations dealing with exchange fluxes (CNAF/SNGI, Imprimerie Nationale, etc.) to attest you are using the correct one.
The application must be sent in paper AND via electronic mail to:
Agence du Numérique en Santé
Labellisation logiciels Maisons Départementales des Personnes Handicapées
9 rue Georges Pitard 75015 Paris
labellisation.mdph@esante.gouv.fr
Cette réponse vous a-t-elle été utile ?
These documents are made available by the CNDA as a .zip file below.
Cette réponse vous a-t-elle été utile ?
Healthcare industrials and software publishers are encouraged to contact Health CERT if they discover a security incident or potential malware. CERT provides assistance and support to resolve such issues. CERT also assists you in your communications to health structures.
Cette réponse vous a-t-elle été utile ?
The application for the SI-MDPH label is open to any legal entity with a software solution aimed at the departmental disability centres (MDPHs). This includes the MDPHs themselves, which develop their own solutions in conjunction with the relevant Departmental Council.
The label application is a voluntary process: Anyone can be a candidate if they feel that their solution complies with the current requirements and the scope of the sector’s functional standards.
Cette réponse vous a-t-elle été utile ?