HARARE, Apr. 24 (NewsDay Live) – Cimas Health Group has set a new national benchmark after securing the ZWS ISO/IEC 27001:2022 certification, becoming the first Zimbabwean medical services provider to meet the latest global standard for Information Security Management Systems (ISMS).
The certification, awarded following a comprehensive audit by the Standards Association of Zimbabwe (SAZ), confirms the group’s compliance with stringent international data protection protocols.
To qualify, Cimas overhauled its IT infrastructure and implemented robust governance frameworks, including advanced risk assessments and staff training, to safeguard sensitive patient and member data.
Chief executive officer Vuli Ndlovu said the milestone aligns the organisation with evolving global cybersecurity demands.
“This confirms that Cimas operates a world-class system designed to protect the integrity and confidentiality of our members’ information,” he said.
The framework also strengthens cyber incident detection and response capabilities, positioning the group to better manage emerging digital threats.
The certification provides added assurance to stakeholders that personal medical data is protected under internationally recognised security standards.
- Cimas to invest US$8m in infrastructure…as it targets medical tourism market
- Cimas gives rural pupils a treat
- Cimas expands services in Mat’land
- Cimas feasts amid crisis




