How to encourage cyber-security in your practice 

To make sure staff understand the cyber-security concerns at your practice, you can use the following resources

CREDIT: This is an edited version of an article that originally appeared on NHS Digital

The NHS and social care organisations are being invited to take advantage of new cyber-security resources designed to raise awareness of the threat of ransomware. New information packs have been made available on the NHS Digital website as part of the existing Keep I.T. Confidential online cyber security awareness toolkit.

Two sets of campaign materials have been published – one aimed at staff based in clinical settings and another for those who work in the adult social care sector.

Launched by NHS Digital’s Data Security Centre, these free materials have been designed to help NHS organisations run their own cyber-security awareness campaigns at a time, and in a way, that suits them. The aim is to improve staff knowledge of cyber-security concerns such as phishing, unauthorised data-sharing, unlocked screens and weak passwords. Assets included in the toolkit are:

• screensavers;
• digital banners;
• sticky notes;
• social media graphics for Facebook, Instagram, Twitter, LinkedIn;
• an animation.

“Good security practices are our shared responsibility, and being cyber-aware can significantly reduce the chance of cyber-events affecting people’s care,” said NHS Digital’s executive director of cyber operations, Mike Fell. “We know how busy staff are, but we encourage everyone to prioritise reducing security risks as much as they can to protect the NHS and social care against vulnerabilities.

“Taking small, simple, steps – and considering security in your day-to-day work – can make a huge difference. We hope that these resources can really play a part in helping to drive that change.”

Ransomware is a form of malicious software that can make data or systems unusable until the victim makes a payment. People can reduce the risk of common cyber-security concerns by:

• choosing a strong and varied password;
• being aware of potential phishing scams;
• wearing their staff ID badges on-site.

More information on the Keep I.T. Confidential campaign is available here.