Date: August 19, 2026
KMP / Board / Auditor Changes
Not Specified
Dividend Declaration or Non-Declaration
Not Specified
Board Meeting Outcomes
Not Specified
Financial Results
Not Specified
Disinvestment / Strategic Actions
Not Specified
Other Operational / Legal / Strategic Disclosures
Cybersecurity Certification Achievement
QMS Medical Allied Services Ltd has successfully completed a comprehensive cybersecurity assessment conducted by CyberVadis, a globally recognized third-party cybersecurity risk-rating and assessment platform.
The company has been awarded the "Gold" certification for the year 2026, with the following specific achievements:
- Assessment score: 918 out of 1000
- Maturity category: "Mature" cybersecurity maturity
- Certification validity: Until August 17, 2027
- Next assessment: Re-assessment will be undertaken in the ordinary course after validity period
- Assessment date: August 18, 2026
About CyberVadis Assessment
CyberVadis is an independent cybersecurity risk assessment platform widely used across global supply chains, particularly in healthcare, pharmaceuticals, and life sciences. The assessment evaluates an organization's information security posture against recognized industry frameworks including:
- ISO 27001
- NIST frameworks
- GDPR-aligned controls
Assessment areas covered include:
- Governance
- Data protection
- Access control
- Asset management
- Third-party risk management
- Business continuity
- Incident response
Scoring system: Assessments are scored on a 1,000-point scale and mapped to maturity bands ranging from Basic to Mature to Advanced. Recognition levels are Bronze, Silver, Gold, and Platinum based on the score achieved.
Significance for the Company and Stakeholders
Regulatory and Client Trust: In the healthcare and medical services sector, demonstrable cybersecurity maturity is a material factor in:
- Client due diligence
- Hospital and insurer empanelment
- Cross-border data-handling arrangements
Risk Mitigation: The independent, externally validated assessment reduces the company's exposure to:
- Data-breach risks
- Ransomware risks
- Third-party supply-chain risk
These risks carry direct financial, reputational, and regulatory consequences for listed entities.
Competitive Differentiation: Gold-level certification distinguishes the company in vendor empanelment processes where cybersecurity scorecards are increasingly a mandatory evaluation criterion.
Governance Signal to Investors: The certification reflects the Board's and management's continued investment in information security governance, forming part of the company's broader ESG and enterprise risk management framework.
Business Continuity: Strengthened controls around data protection and incident response reduce the likelihood of service disruption, which is particularly critical given the company's role in the healthcare services value chain.
Ongoing Compliance Commitment
The company views continued compliance with recognized cybersecurity assessment frameworks including:
- CyberVadis
- ISO 27001
- Applicable data protection regulations
As an ongoing and material component of its risk management and corporate governance practices, not as a one-time exercise. This is particularly important given the sensitivity of patient and healthcare data handled in the ordinary course of business.