London Borough of Harrow connects to the NHSnet

During the autumn of 2001, Hytec Information Security was approached by the London Borough of Harrow to assist in achieving connection to the NHSnet - the largest secure private network in Europe .

Funded by a government initiative to improve communications across the health community, connection to the NHSnet would allow Harrow's social care professionals to share confidential case information with NHS colleagues working in mental health disciplines.

However before connection could be allowed, the borough had first to demonstrate strict adherence to the information security standards set by the NHSIA (NHS Information Authority).

In assisting the borough to develop its application for connection, Hytec developed a high-level overview of LB Harrow's IT infrastructure. The documents were reviewed by NHSIA's security management who gave ‘in principle' approval to the application. Hytec was then asked to conduct a detailed network audit to verify that the borough's information security regime conformed with both requirements of the NHSIA and content of the TTPC (Trusted Third Party Connection) application.

On acceptance of the audit findings, which included an overview of existing infrastructure, analysis of network and physical security and a remedial action plan, Hytec was requested to ‘strengthen' the IT infrastructure with new firewall protection and strong authentication processes.

After implementing the enhancements, the London Borough of Harrow was able to formally request connection to the NHSnet. This was granted in June 2002, just over six months after commencing the project. Hytec fully supported the borough throughout the entire process and also assisted in the development of security policies and further enhancements of the borough's perimeter security.

Commenting on the successful connection, Dave Hope, Network Services Team Leader at the borough said: “Throughout the whole process of gaining NHSnet connection, Hytec supported the Borough with skilled consultants.”

With considerable experience of the information security requirements for third party connections to the NHSnet, Hytec is one of only a few companies recognised by the NHSIA as being experienced network security auditors, suitable for conducting the network audit required for NHSnet connection. Indeed, Hytec has worked with the NHSIA and has been involved the NHSnet connections since 1996.