NHS DSP Tool Kit
Achieve Compliance with the National Data Guardian’s 10 data security standards.
The introduction of IoT and other connected devices to healthcare facilities in recent years has burdened the already taxing workload on these organisatons’ security teams. Maintaining defense is no easy task, but a healthy confidence in security can be achieved.
What is DSP NHS Toolkit?
The Data Security and Protection Toolkit is an NHS-produced self-assessment tool that enables healthcare organisations to measure their performance against the Nation Data Guardian’s 10 data security standards. It is a requirement that any organisations with access to NHS patient data or systems use the toolkit to ensure that good data security practices are being understood and personal information is being protected.
What’s The threat?
The healthcare sector is a high-value target due to the value of the patient medical data and the urgency caused by service interruptions due to the threat to life. As a result, extortion (and double extortion, in recent times) against organisations in the sector is a common attack. The vast amount of financially motivated cybercrime against this sector arguably makes these criminals the greatest threat to many healthcare organisations.
Connected Devices & OT RESILIENCE
Threats will no doubt evolve alongside connected devices as technology advances. Society’s reliance on smart medical equipment and remote monitoring will grow as populations age. This increases the number of devices that are connected directly to the internet. Malicious actors prefer to attack these exposed devices as they are easy targets, and their connectedness helps them move across networks.
Much like double extortion, which has increased in recent times as part of ransomware’s evolution, further trends will form in attackers’ modus operandi as part of the evolution of IoMT.
How Sapphire Can Help?
When combined with an independent on-site assessment, the DSP Toolkit encompasses equivalent control to Cyber Essentials and Cyber Essentials Plus. A baseline publication must be made by all NHS Trusts, Arm’s Length Bodies (ALBs), Commissioning Support Units (CSUs) and Integrated Care Boards (ICBs) by 29th February 2024. The deadline for the DSP Toolkit is 30th June 2024 for all NHS Trusts, ALBs, CSUs, Key IT Suppliers and Operators of Essential Services (OESs) under the Network and Information Systems (NIS) Directive.
Our team of experts can assist with many DSP Toolkit assertions, ensuring deadlines are met.
