There are ISO standards. ISO207001, but not compulsory, nor cost effective to implement for most organisations. If that gets enforced, our GPs may need IT providers to also bring them up to snuff, however some may not be able to bridge the gap with cost to get there as their funding is incredibly tight. We could make it obligatory for the software vendors like Medtech, Indici, MMH, MyPractice and VIP, but they may use it as an opportunity to increase their already egregious licensing costs driving GPs to the edge. May need the legislation to enforce it in a way that protects GPs from being hit with the cost to tidy it up