NHS data security needs to be regularly audited
By Chris Taylor
05/07/2011
Comprehensive network management solutions and regular security regimes are needed to prevent the abuse of data in the National Health Service (NHS).
That's according to IT security aficionado Ray Bryant, who told info4security.com that despite having a close relationship with Information Commissioners Office (ICO); NHS staff are only human and are therefore likely to make mistakes.
"Most NHS staff - who do an excellent job by the way - understand they should not discuss patients outside of work, and also not compromise patients' personal information in any shape or form, but it's a long way between securing a buff folder in a hospital environment to understanding why data held on a USB stick needs to be secure," explained Bryant.
His comments follow the recent loss of a NHS laptop from a North London hospital. The incident - which is currently under investigation - prompted the Information Commissioner, Christopher Graham, to admit that "the security of [NHS] data remains a systemic problem," according to Ico.gov.uk.
Bryant argues that with nearly three per cent of the UK population handling sensitive NHS data, there is no way that staff are likely to fully understand the reasons why IT security needs to be addressed in everything they do.
He also said it was understandable that tired staff make mistakes, such as leaving USB sticks, smartphones or laptops open.
"This is why IT security professionals like to undertake regular security audits and efficiency tests," he exclaimed. "It's not for their own good, or because they like doing them. It's because they are a must-have in today's IT-pervasive workplace."
