BCS releases NHS cyber security advise

BCS, The Chartered Institute for IT has produced a blueprint outlining the steps NHS trusts should take to minimise the effects of another crippling cyber attack.

The Blueprint For Cyber Security in Health and Care, released alongside the Patients Association and the Royal College of Nursing, argues that a lack of accountability and investment in cyber security measures were partly responsible for the recent cyber attack that struck NHS IT systems in May.

The paper details what steps NHS trusts should take to avoid another crippling cyber attack, including clear standards for accrediting relevant IT professionals. NHS boards are being urged to ensure they understand their responsibilities, and how to make use of registered cyber security experts. The number of properly qualified and registered IT professionals also need to be increased.

David Evans, director of Policy, said: “Patients should be able to trust that hospital computer systems are as solid as the first-class doctors and nurses that make our NHS the envy of the world. Whilst doing the best with the limited resources available, it is clear that some hospital IT teams lacked access to trained, registered and accountable cyber-security professionals with the power to assure hospital Boards that computer systems were fit for purpose.

“The healthcare profession has struggled to keep pace with cyber-security best practice and with a systemic lack of investment, ultimately, the Wannacry attack was an ‘inevitability’. With the roadmap we are releasing today, will make it less likely that such an attack will have the same impact in the future.”