CareCERT updates to boost NHS comms during incidents

NHS Digital has established an additional effective and secure system to deliver essential cyber security updates across the whole NHS.

Following a successful trial, CareCERT bulletins and updates can now be sent out using SMS alerts during major security incidents. An initial alert, to highlight a high severity security incident, will be followed by another which signposts colleagues to NHS Digital's external website for the latest information from CareCERT's specialist team.

CareCERT is also working with the National Cyber Security Centre (NCSC) to establish a professional network of IT and security professionals in health and care who could share invaluable insights during a cyber-attack in a secure online environment.

Toby Griffiths, Innovation & Development Lead at the Data Security Centre, said: "Finding a secure way to communicate nationally with NHS organisations during a major incident was a priority for us following the WannaCry incident in May. SMS was identified as an appropriate solution following feedback from users affected by WannaCry, as it offers an additional level of resilience beyond the standard channels used for sharing CareCERT updates. We want to take that a step further by building a professional network across the NHS through online collaboration. The NCSC forum allows us to share information securely that we might not otherwise be able to share.

"CareCERT is the official source of advice, guidance and national incident response for data security in health and care. Strengthening our communications in this way will ensure that key contacts are receiving critical updates during major incidents, especially when they might not have access to their email or work computer."