Complying with the NHS N3 IG toolkit pays off


Ely, England, 23 January 2012IT Governance Ltd, the ISO27001 and compliance specialist, is reminding NHS suppliers that now is the time to act if they are to meet the requirements of the NHS IG toolkit version9. The fastest route to success is using professional services, which will guide companies through the process. The IT Governance NHS N3 Consultancy Service is specifically designed to assist Commercial Third Parties ('CTP') seeking to comply with the requirements of the NHS IG Toolkit v9.

The final submission deadline for assessment is the end of March 2012. The NHS IG Toolkit v9 has up to 45 requirements classified under 6 initiative areas. Version 9 is considered to be more detailed and prescriptive than previous versions, breaking each requirement down into detailed criteria. Non-compliant organisations need to take appropriate measures like assigning responsibility and putting in place policies and procedures in order to raise governance standards through year on year improvements.

The requirements of the IG Toolkit provide the NHS with a level of assurance that organisations accessing, processing or storing Patient Identifiable Data are serious about their information security. Therefore, in order to demonstrate a certain level of compliance, organisations must fulfil all requirements.

Alan Calder, CEO of IT Governance, says, “For many organisations, completing the IG Toolkit, as well as the uploading and referencing of evidence to support their application, takes a lot of time and hard work. Therefore, getting consultants on board is often the preferred option. This allows the client to get on with their day job, while the consultants take care of all the N3 connectivity-related issues. Organisations seek our services because we are flexible and can ensure that they achieve full compliance on time and within budget.”

There are various levels of consultancy support which IT Governance offer their clients – from an N3 gap analysis, to assistance with key milestones, such as N3 training and auditing, through to full application and IG Toolkit submission on behalf of the client.

For smaller organisations, designated as commercial third parties, with up to 20 employees and a single office location, the experts at IT Governance have designed a special FastTrack N3 Consultancy Service at a one-off fixed fee of £5,000 + VAT.

With its low cost and fast implementation, this service delivers N3 compliance with minimal disruption to the organisation’s business activities, and without the time and additional cost required to develop ‘in-house’ expertise.

“Our experience of working with smaller companies has shown that we can accelerate the application process and comfortably help organisations achieve N3 compliance over an eight-week period,” adds Alan Calder.

Full details of the NHS N3 Connecting for Health Consultancy Service are available on the IT Governance website at and for the FastTrack N3 Consultancy Service at Interested organisations can find out more about this service by telephoning

+ 44 845 070 1750 or e-mailing

This website uses cookies. View our cookie policy