Cyber security - Stop threats, remain compliant, ensure resilience

As the NHS increasingly relies on digital systems and technology to deliver services to patients, organisations are being faced with more frequent and more complex threats to cyber security.

When healthcare IT infrastructure is compromised the impact can be felt financially, with the WannaCry ransomware attack in 2017 estimated to have cost the NHS £92 million, and operationally, with the most recent ransomware attack taking some NHS 111 systems offline for four weeks. The COVID-19 pandemic response has further increased challenges in this area, with an increase in staff working from home and a greater use of digital tools and devices.

Protecting patient information and preventing disruption to patient care through effective cyber security is a priority that systems and organisations cannot afford to overlook, as recognised in the government cyber security strategy to 2030.

Arden & GEM’s cyber security services are already ensuring that health and care systems are able to stop threats, remain compliant and become more resilient. We currently provide IT services to 50,000 users and more than 500 sites which delivers extensive expertise and efficiencies for all our clients.

Our services

Our approach recognises that effective cyber security resilience relies on more than just technology, so we combine the latest technical controls with robust processes and a focus on workforce training and engagement to foster a collaborative cyber security culture.

We can deliver a full cyber security support service or discrete projects to help you address your individual challenges across the following key areas:

Prevention

Our prevention solutions are designed to detect, investigate and stop advanced threats before they have an impact on your organisation. Our services in this area include:

• Cyber security health checks
• Penetration testing
• Incident reporting and response
• Unified cyber risk reviews
• Tailored action plans
• End device/server reviews.

Network configuration

Our solutions ensure your network is resilient to cyber attacks from both internal and external sources. We can help you to build a robust network with service elements including:

• Secure configuration (including regular updates)
• Network security (including virus/malware prevention)
• Network monitoring
• Removable media controls
• Home and mobile working.

Compliance

Our solutions ensure you remain compliant with the latest industry regulations and standards including Network and Information Systems (NIS) Regulations, Data Security Protection Toolkit and the Cyber Essentials Framework. We enable our clients to demonstrate proof of compliance with services including:

• Cyber security assessments including Cyber Essentials Plus
• Cyber security policy and process development
• User privileges and access management
• User education and awareness
• Strategy development
• Support with cyber reviews
• Procurement support
• Policy reviews
• Change programmes needing cyber expertise.

Why Arden & GEM?

We have an experienced and fully qualified team

• (ISC)² Member
• Certified Information Systems Security Professional (CISSP)
• Systems Security Certified Practitioner (SSCP)
• Certified Cloud Security Professional (CCSP)
• Cyber Incident Planning & Response (CIPR)
• Certified Information Security Manager (CISM)

We are part of a wider network of digital expertise within Arden & GEM’s IT service
This enables us to provide flexible capacity, proactively share best practice and innovation, and deliver solutions efficiently.

We work closely with a range of partners, networks and communities to stay at the cutting edge of cyber security

• We are members of the Cyber Associates Network (CAN), established by NHS Digital (now part of NHS England) to ensure resilience and maintain patient safety. Our Head of Cyber Security is a co-chair of the CAN Development Group
• We are active participants within online communities designed to provide immediate alerts on future cyber security incidents and enable information sharing on the most effective responses to potential threats.

We hold the Cyber Essentials Plus certification
And are also an accredited assessor to support clients meet the requirements of Cyber Essentials.

We are part of the NHS
We share your values and put patients before profit.