Information Security Solutions
We design, build and manage IT infrastructures that support secure connectivity and information sharing.
Through our experience of connecting to secure networks, such as GCSx, or the NHS’s N3, we have become a trusted advisor to bodies such as Capital Ambition (previously London Connects), Socitm, ADASS and NHS CfH (Connecting for Health). We provide information security consultancy, infrastructure design and managed security services to local government, health authorities and commercial organisations, especially where connection to N3 network is required.
Information security is not just about IT solutions
We provide services that encompass the identification of all information assets, and measure the risks associated with those assets. This involves looking at information held both on computer systems and paper records, and in assessing the risks presented by the people who have access to that data.
Of equal importance to the design of IT infrastructure and networks are the associated policies and procedures around handling data. Our consultants are well versed and highly skilled in both areas – offering leadership and advice with the message that it is not just the IT management’s function to worry about Information Security.
The challenge of information sharing
Local Authorities and Health Authorities share a key challenge – to share information across the boundaries of their organisations. This clearly presents further challenges to protecting the security of that information, yet this requirement is being driven by powerful political and legislative pressures. For example, the Department of Work and Pensions are responsible for the payment of Housing Benefit to claimants; however the administration of claims is the responsibility of the Local Authority. This requires that highly sensitive data is shared between Central Government and the Local Authority.
A further example of the need to share information follows regrettable incidents such as Victoria Climbié and Baby Peter. A Central Children’s Register, ContactPoint, is under development which will contain information on every child in England and Wales and be shared across all 150 Local Authorities with Child Care responsibilities. Whilst vital to the sharing of information between agencies, this development has very significant information security ramifications – we have been advising on these issues as experts in the area.
Information security and Local Authorities
Our relationships with Local Authorities are extremely strong and we are regarded as a ‘trusted advisor’ on issues of secure connectivity, information sharing and information security. Our consultants have been heavily involved in the evolution of LPSN – the platform by which London Boroughs share information securely and access both the Government Secure network GCSx and the NHS N3 network.
The LPSN structure is being used as an exemplar of good practice on which other regional networks will be based, and again, we have been asked to advise in the implementation of these.
In association with the OLM company Pavilion, we are developing a secure web portal service that will provide Information Security Management, as a service, to Local Authorities.
Information security and the Health Service
We are heavily involved in information security projects within the Health sector. The national programme for IT (NPfIT) and the Central Patient Record initiative have significant Information security challenges, including the implementation of role-based security whereby each member of staff should be able to access patient information relevant to the role that they hold. This should ensure the confidentiality of sensitive data and allow access only to those medical professionals who require the information.
We have developed a unique solution for the health care market. GPSecure™ is a unique solution that protects GPs from the security risks inherent within the NHS N3 network and enables PCTs to fulfil their statutory requirement to manage the GPs systems whilst offering GPs the chance to remotely access their own data. This system is currently in use in Kensington and Chelsea, to great success.