CareCERT uses SMS alerts to boost secure NHS communications for cyber incidents
NHS Digital has established an additional effective and secure system to deliver essential cyber security updates across the whole NHS.
During major security incidents, CareCERT bulletins and updates can now be sent out using short message service (SMS) alerts, following a successful pilot. Contacts in Acute, Ambulance and Mental Health Trusts, Clinical Commissioning Groups and Commissioning Support Units can receive the alerts through this additional channel.
SMS will be used to issue an alert to highlight a high severity security incident, followed by another which signposts colleagues to NHS Digital's external website for the latest information from CareCERT's specialist team. CareCERT works closely with the National Cyber Security Centre (NCSC) during major incidents and analyses multiple intelligence sources to ensure that users are provided with expert guidance.
The alerts are sent using the free government alert service, GOV.UK Notify. Messages can be sent to NHS organisations across the country without the need for NHS Mail or any other national applications.
The team is also working with the National Cyber Security Centre (NCSC) to establish a professional network of IT and security professionals in health and care who could share invaluable insights during a cyber-attack in a secure online environment. .
The pilot uses the NCSC Cyber Security Information Sharing Partnership (CiSP) forum, which is already used to discuss local challenges, recommendations and good practice but has the added benefit of being able to add private groups. In the event of a large-scale incident, representatives from affected organisations can be invited to a closed group to discuss their situation in a private and secure setting, with the ability to receive intelligence that could not be openly shared.
Toby Griffiths, Innovation & Development Lead at the Data Security Centre, said: "Finding a secure way to communicate nationally with NHS organisations during a major incident was a priority for us following the WannaCry incident in May.
"SMS was identified as an appropriate solution following feedback from users affected by WannaCry, as it offers an additional level of resilience beyond the standard channels used for sharing CareCERT updates. We want to take that a step further by building a professional network across the NHS through online collaboration. The NCSC forum allows us to share information securely that we might not otherwise be able to share.
"CareCERT is the official source of advice, guidance and national incident response for data security in health and care. Strengthening our communications in this way will ensure that key contacts are receiving critical updates during major incidents, especially when they might not have access to their email or work computer."
Any organisation not already signed up through CareCERT Collect should request sign-up by emailing email@example.com
Notes to editors
1. NHS Digital is the national information and technology partner of the health and care system. Our team of information analysis, technology and project management experts create, deliver and manage the crucial digital systems, services, products and standards upon which health and care professionals depend. During the 2016/17 financial year, NHS Digital published 292 statistical reports. Our vision is to harness the power of information and technology to make health and care better.
Latest News from
Latest figures on staff vacancies in the NHS released27/11/2020 09:15:00
NHS Digital has published the latest figures on staff vacancies in the NHS, providing a range of data sources to help build a picture of staffing levels in England.
New statistics on cervical screening programme for 2019-20 published26/11/2020 12:43:00
The latest annual report on cervical screening coverage in England has been published by NHS Digital today.
Secure access to health data improved to aid coronavirus research20/11/2020 12:25:00
Researchers working on projects related to COVID-19 are benefitting from a new service for studying vital health data quickly and securely.
NHS Digital publishes information on ethnicity recording in the NHS to aid planning and research for COVID-1920/11/2020 09:15:00
The Ethnic Category Coverage Management Information, published yesterday by NHS Digital, uses data from the GPES Data for Pandemic Planning and Research (GDPPR) and Hospital Episodes Statistics (HES) data sets to show the recorded ethnicity of patients, broken down by Clinical Commissioning Group.
Neighbourhood coronavirus cases and 111 telephone figures shown in new public dashboard18/11/2020 09:15:00
NHS Digital has published the Coronavirus Neighbourhood View dashboard which shows numbers and rates of coronavirus cases confirmed through testing across England and NHS Pathways 111 telephone assessments with potential coronavirus symptoms.
National project shows digital inclusion is key to tackling health inequalities17/11/2020 09:15:00
Tackling the ‘digital divide’ is crucial to reduce health inequalities, a three-year project trialling digital technology with disadvantaged communities has found.
NHS saves around £75m a year thanks to historic public sector data network migration13/11/2020 14:20:00
NHS Digital has completed the largest known public sector data network transition programme, saving the NHS an estimated £75m a year and providing organisations with faster connectivity at reduced cost.
Statistics on safeguarding published in two new reports out today13/11/2020 09:15:00
NHS Digital yesterday released new figures on Deprivation of Liberty Safeguards (DoLS) and Safeguarding Adults in two publications.