Skip to product information
1 of 1

Healthcare & PharmaceuticalAGS-07-022

Healthcare Information & Cyber Security Management System (ADHICS)

Healthcare Information & Cyber Security Management System (ADHICS)

ADHICS is mandatory in Abu Dhabi and it is enforced, and a generic ISO 27001 toolkit will not map onto it.

Regular price $990USD
Regular price USD Sale price $990USD
Taxes included.
Secure checkout American Express Apple Pay Diners ClubDiscoverGoogle Pay JCBMastercard Visa

Written and reviewed by practising specialists. Who writes this

Built and reviewed with our methodology. Read it

Preview free samples

Ask ChatGPT about this toolkit
View full details
43 ready-to-use documents 43 Word · plus the AGS license

By document type

Total 43
CategoryFiles
Manuals2
Policies1
Procedures & SOPs13
Forms & Records16
Checklists & Audit Tools7
Registers, Logs & Matrices1
Training & Awareness2
Guides & Work Instructions1

Key documents

ReferenceDocumentFormat
AGS-QM-001Information Security Quality Manual Word
AGS-PR-02Risk Assessment and Treatment Word
AGS-PR-05Access Control Management Word
AGS-PR-11Incident Management Word
AGS-F-10Incident Report Word
AGS-REC-03Risk Register Word

Overview

ADHICS, the Abu Dhabi Healthcare Information and Cyber Security Standard issued by the Department of Health, sits structurally close to ISO/IEC 27001 without being identical to it. That near-resemblance is where providers come unstuck: a control an ISO 27001 toolkit answers in general terms is a specific ADHICS requirement, and the space between the two is a finding. This system is written to ADHICS directly, aligned with the Department of Health ADHICS Implementation Guidelines of 9 December 2019, the edition all 43 documents follow. ADHICS V2 (2024) has since replaced them, so check the current controls against the documents before use.

The Information Security Governance Committee is named as the approving authority and the Information Security Manager carries ownership, both built into the approval routing of every document. From there the system works through the ADHICS control structure: risk assessment and treatment, asset management and classification, human resources security, physical and environmental security, access control and identity management, operations and change management, backup and restoration, third party security, incident management, information security continuity, and internal audit with corrective action. The risk register, incident log and asset inventory arrive as working registers, and a Scheme document fixes numbering and classification so the system can be extended without breaking its logic.

What this system covers

  • Governance and risk — the Information Security Governance Committee, risk assessment and treatment
  • Asset management and classification — asset inventory and the classification of information
  • Access control and identity — user, mailbox and application access through to employee separation
  • Human resources and physical security — personnel obligations and control of secure areas
  • Operations, change management, backup and restoration — controlled change and recoverable data
  • Third party and supplier security — pre-engagement and ongoing assessment of vendors
  • Incident management and continuity — reporting, investigation and corrective action
  • Internal audit and ADHICS self-assessment — verifying controls domain by domain

Who it's for

Hospitals, clinics, diagnostic centres, pharmacies, insurers and health-tech providers operating in Abu Dhabi, their Information Security Managers and CISOs, and the consultants delivering ADHICS compliance programmes. The trigger is a Department of Health compliance obligation that has become urgent, or a self-assessment that exposed how far a generic policy set falls short; the implementation roadmap gives the sequence to work in.

Everything you get

Every toolkit gives you a full set of working documents for your standard, ready to edit and use.

Editable Word and Excel

Native Microsoft files. Add your logo and adapt every document to how you work.

Instant download

Your full toolkit arrives as a ZIP the moment payment clears.

Unlimited users

One purchase covers everyone in your organisation. No per-seat fees.

Written by auditors

Built by people who run real audits, so the content matches what assessors check.

Yours to keep

One payment, perpetual licence for your organisation. No subscriptions, no renewals.

Refund guarantee

Full refund if your files are faulty, incomplete or not as described and we can't put it right

Frequently asked questions

What exactly do I receive?

A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.

Are the documents really editable?

Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.

Does this certify my organisation?

No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.

How is it delivered?

Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.

Do I get updates?

Yes. If we revise this toolkit, you're entitled to the updated version at no extra cost — just contact us with your order details.

What is your refund policy?

These are digital products, so once a toolkit has been downloaded we cannot take it back. If you have not downloaded yet, contact us and we will cancel the order and refund you in full. We also refund in full if the files are damaged, incomplete, or not what the product page described.

Cannot find your standard?

Tell us which scheme you work to. We will point you to the right toolkit.

Request a toolkit