An HDS (Health Data Hosting) Management System is built primarily on three standards: ISO 27001:2013, ISO 20000-1:2011 and ISO 27018:2014. It is enriched with requirements specific to the protection of health data.
This course will provide you with knowledge of best practices for implementing and managing an information security management system and an HDS management system to effectively protect health data.

Distance learning training


  • Understand the challenges of an HDS management system to effectively protect health data
  • Acquire the terminology and basic knowledge necessary to meet the requirements of ISO 27001 associated with ISO 20000
  • Discover the best practices of information and health data security management and its articulation with risk management

Course Curriculum

Session 1

Health data hosting

  • Regulatory framework
  • Health data, ISMS

Session 2

Certification process

  • Requirements & activities
  • Organization of an ISMS based on ISO27001
  • Health data risks

Session 3

HDS: requirements and evidence

  • Information Security
  • Service Management

Session 4

HDS: requirements and evidence

  • Protection of individuals
  • Additional Requirements

Session 5

HDS Certification

  • Documentary
  • Steps and durations

Principle planning

  • 10 hours of classes with the trainer divided into 5 sessions of 1h30 to 2h
  • 4 hours of personal work time in autonomy
Monday Tuesday Wednesday Thursday Friday
Week 1 Introduction Session 1
Week 2 Session 2 Session 3 Session 4 Session 5 Exam


  • 1H closed book online certification exam.
    • Consists of a total of 50 multiple choice questions

The +

  • Training provided by an expert in information security
  • An intuitive and easy-to-use platform
  • Exchange moments on key concepts and experience sharing adapted to the learners’ context
  • A training pedagogy adapted to all learning profiles

Who should attend?

  • Any person involved in information security management
  • People who want to acquire knowledge of the main HDS management processes
  • People who wish to pursue a career in HDS management


  • Basic knowledge of information security
  • Have knowledge of data protection and health data.

How and
when to access

The participant is considered registered when:

  • The prerequisites and needs are identified and validated
  • The training agreement is signed

Registration requests can be sent up to 5 working days before the start of the training.


Whether you are recognized as having a disability or not, making our training accessible to everyone is part of our commitment. If you need compensation or adaptation for the content, the supports, the place, the material used, the schedules, the rhythm, we are at your disposal.


14 hours


€1300 excl tax

+ OPCO support

Download the educational sheet in PDF format

Would you like more information?

contact us by filling out this form

    Almond commits itself to ensure that the collection and processing of your data, carried out from the site, are in conformity with the General Data Protection Regulation (GDPR) and with the modified law n° 78-17 of January 6, 1978, relating to the protection of personal data.
    The information collected on this form is recorded in a file computerized by Almond, in order to answer the requests for information.
    You can access the data concerning you, ask for their correction or their deletion. You also have a right of opposition, and a right to limit the processing of your data (see for more information on your rights).
    You can exercise your rights by contacting Almond's Data Protection Officer at the following address:
    Your data will be kept within the European Union, in accordance with the regulations in force.