eHealth Ontario has introduced a new resource to help the health care sector navigate the complex landscape of patient data protection. The Guide to Information Security for the Health Care Sector was recently launched and is now available here. The information security tool provides a common framework for applying security controls for the protection of personal and personal health information. It is based on the international security standards ISO27001 and ISO27002 and will establish best practices in information security and risk management by providing sample policies, templates, checklists and a risk management methodology.