Information Governance
Information Governance is a framework or umbrella term. It informs the NHS and its partner organisations of the processes and procedures that it must have to ensure:
- your confidentiality is respected;
- your records are held in secure conditions;
- information about you is recorded clearly and accurately, so that it can be easily read and relied upon by others providing you with care.
Please email us or telephone + 44 (0)845 070 1750 and talk to us about how our Information Governance Consultancy service might work for you!
The Information Security Management: NHS Code of Practice is a guide to the methods and required standards of practice in the management of information security for those who work within or under contract to, or in business partnership with NHS organisations in England. It is based on current legal requirements, relevant standards and professional best practice.
Protecting the NHS infrastructure
Information systems used by NHS organisations and their information partners are becoming increasingly interconnected. This creates many new and useful benefits. But at the same time, these arrangements introduce new risk factors. Many of the critical services that are essential to the well-being of the UK are dependent, to a greater or lesser extent, on information technology. These services are provided by both public and private sector organisations. The Government is identifying the core services that need to be secured from electronic attack and is seeking to work with those organisations responsible for these systems so that these services are protected in a way that is proportional to the threat. This is known as the Critical National Infrastructure (CNI) protection programme.
 |
Buy The Information Governance Toolkit provides primary health care teams and NHS professionals with the information to assist them in dealing with the legal, ethical and social issues of information governance in relation to accessing patients' data. It covers the problems that can arise from the computerization of patient records and guides practitioners through tackling real difficulties that can arise when trying to implement the current legislation rules and policies. |
Security requirements
In order to connect with N3, organisations must first ensure that their information security management system (ISMS) complies with NHS security policies - which take all their controls from the ISO/IEC 27001 information security management standard.
IT Governance Ltd has extensive experience of ISO27001 (dating back to the world's first ever certification to BS7799, the forerunner of ISO/IEC 27001) and also has practical experience with N3 connections and requirements.
For more information about Codes of Connection and how our consultancy services might work for you email us or telephone + 44 (0)845 070 1750.
