Medicalgorithmics S.A. is a publicly traded company on the Warsaw Stock Exchange, specializing in medical technology. The company delivers FDA-certified technologies based on artificial intelligence for diagnosing heart arrhythmias. Medicalgorithmics has gained a competitive position through the development of unique algorithms, innovative software, and devices that enable more precise diagnoses and personalized treatment compared to traditional technologies. Their ECG database, containing over 2.5 billion labeled heartbeats, along with a predictive analytics platform, enables the detection of heart disorders. Their flagship product, PocketECG, monitors and diagnoses approximately 200,000 patients annually in over 20 countries.
Facts and figures
Full name
Medicalgorithmics S.A
Industry
Technology
Products
Technological solutions in cardiology diagnostics
What did the client expect?
Due to the increasing legal requirements regarding cybersecurity, particularly the new NIS 2 directive, Medicalgorithmics was looking for a trusted partner to verify whether their procedures and IT systems meet the latest standards and security requirements. They chose PBSG. The task involved conducting a compliance audit and preparing recommendations for corrective actions.
What did we do?
WE CONDUCTED A COMPLIANCE AUDIT
The main goal of the audit was to assess whether the IT systems comply with the new legal requirements regarding the security of networks and information systems. The objective was to identify any gaps or areas that would require adjustment to ensure the company is fully compliant with the NIS 2 Directive.
WE EVALUATED THE PROCESSES
The audit focused on several areas, including incident management, technical controls, and data protection procedures. We concentrated on evaluating processes, procedures, and tools used in terms of their security. We also checked whether the company conducts cybersecurity training.
WE IDENTIFIED SECURITY GAPS
We thoroughly analyzed the existing IT security measures to detect potential vulnerabilities that could pose a threat to the company’s systems and data. Identifying these gaps was crucial for developing a strategy to eliminate them and strengthen security.
WE PREPARED RECOMMENDATIONS
Based on the audit results, we developed and presented recommendations. We outlined specific actions the company should take to improve its security. The guidance covered both technical and procedural aspects of security management.
What were the results?
The project involved an NIS 2 compliance analysis, which aimed to evaluate the IT systems and check whether they meet the latest standards and requirements. The audit results showed that Medicalgorithmics is well-prepared for potential cyber threats and has the necessary measures and resources to comply with strict EU standards. Thanks to our recommendations, the organization learned which areas need improvement and how to best address them.
The compliance audit covered the following areas:
- Risk management – assessment of risk identification and management processes within the company;
- Data protection – analysis of data protection procedures, including personal and medical patient data;
- Incident management – evaluation of the company’s readiness to manage security incidents;
- Technical controls – verification of tools and technologies used to assess their effectiveness in securing IT systems;
- Employee training and awareness – analysis of cybersecurity training programs.
Through collaboration with PBSG, Medicalgorithmics gained practical support in aligning with the NIS 2 directive. They received valuable guidance on how to achieve full compliance with cybersecurity regulations and how to ensure due diligence when implementing security measures.
What did the client gain?
A comprehensive assessment of processes and procedures for compliance with the NIS 2 directive.
Practical guidance and recommendations on what to do to meet the latest security standards.
A reliable, clear, and valuable audit report.
Increased awareness and knowledge of cybersecurity among employees.