NHSO English Website

Security Policy

This page sets out the National Health Security Office’s Information Security Policy and Guidelines B.E. 2565 (2022), issued to keep the confidentiality, integrity and availability of information across the Office and its branch offices.

Announcement of the National Health Security Office

Re: Information Security Policy and Guidelines, B.E. 2565 (2022)

Whereas it is deemed appropriate to revise the information security policy and guidelines of the National Health Security Office so that they are appropriate and secure, and enable operations to be carried out continuously and efficiently;

By virtue of Section 31, paragraph one, and Section 36 (2) of the National Health Security Act B.E. 2545 (2002), in conjunction with Sections 44 and 45 of the Cybersecurity Act B.E. 2562 (2019) and Section 5 of the Royal Decree Prescribing Rules and Procedures for Electronic Transactions of the Public Sector B.E. 2549 (2006), the Secretary-General of the National Health Security Office hereby issues the following Announcement.

Clauses 1–4: Title, Effective Date, Repeal and Definitions

Clause 1. This Announcement shall be called the "Announcement of the National Health Security Office Re: Information Security Policy and Guidelines, B.E. 2565 (2022)".

Clause 2. This Announcement shall come into force on 1 April B.E. 2565 (2022).

Clause 3. The following are hereby repealed:

  1. The Announcement of the National Health Security Office Re: Information Technology Security Policy, dated 23 June B.E. 2557 (2014);

  2. The Announcement of the National Health Security Office Re: Information Security Guidelines, dated 16 July B.E. 2557 (2014).

Clause 4. In this Announcement:

"Office" means the National Health Security Office, including its branch offices.

"Secretary-General" means the Secretary-General of the National Health Security Office.

"Policy" means the principles on information security.

"Guidelines" means the rules of practice on information security.

"Information Security" means the preservation of the confidentiality, integrity and availability of information, as well as other properties, namely authenticity, accountability, non-repudiation and reliability.