Call us on
0330 056 4079

My Account 0 My Basket
0330 056 4079
  1. Home
  2. /
  3. Cyber Security for the...

Cyber Security for the Health and Care Industry

As an NCSC Certified Assured Service Provider and Certification Body, Adapt-IT can support Health and Care based businesses or organisations, in achieving Cyber Essentials or the IASME Cyber Assurance-based policies, processes and approach to better protect their business and clients.

Added to our unique understanding of all assistive IT and Gaming systems within a care environment Adapt-IT are well positioned to be the IT partner of choice. This allows enabling the care Industry to focus on care giving and supporting local communities.




Scroll down for more details

A picture giving information on the Adapt-IT Cyber Security certifications. Top left in monocrome is the National Cyber Security Center Assured Service Provider badge, below this is the Cyber advisor badge which has the text to the left and to the right a blue circle with a big Tick in it. The tick is a light green through to a blue colour fade top to bottom. Bottom left is the IASME Cyber Assurance Badge with the text on the right and a yellow circle on the left with a white tick outlined in greenin the center. On the right is an info graphic. At the top is the Cyber advisor badge and IASME consortium badge below is text as follows Cyber advisors help organisations by: 1. Offering relliable, cost-efective cyber security advice, 2. Helping to Implement the cyber Essentials five technical controls, 3. Providing practical hands-on help where required. IASME.co.uk/cyber-advisor-scheme/
Nursing home. Old woman man living in senior house. Doctor nurse care elderly people. Happy retired, gerontology patient vector illustration. Old senior, nursing and caregiver, retired healthcare

Business enablement: The Cyber Journey and Cycle

Working in the Care sector is tough, but protecting your business and data shouldnt be.  Adapt-IT can support your organisation to put in place the ability to protect your organisation from the main threats to your business.  We have a unique view of the care industry and with this experience combined with expert cyber knowledge we can support your IT in helping to ensure precious time is spent on providing your care services.

Cyber Essentials and IASME Governance is not about certification or compliance, It is about business enablement.  Allowing your teams to work flexibly and in a secure and resilient way.  Cyber Security is seen as a bind or something that must be done that comes at a cost.  of course, a balanced and security in depth approach is going to cost both financially and in your teams time.  So, it is important this is done efficiently and in a balanced way.  However, if done appropriately this cost can be balanced and business efficiency can be gained.

 

Maintaining Focus on Care

Better Results

By using specialists to carry out the parts of Security you want managed, your business will get better results by being able to focus on your core and critical risks.

Achieve the right balance

Our specialists can help you achieve the right security balance for your business.  By balancing cost and risk to meet your compliance and regulatory obligations.

Quicker deployment

Security specialists can reduce time to implementation and risk of delays and unpredictable outcomes.  Our teams can either run, or supplement your team with required skills to deliver security on time.

Responsiveness

Gain the ability to improve your business’ ability to respond to any risks or threats that your business faces quickly and efficiently.  Reducing impact to you and your clients.  Adapt-IT can be agile and flexible and support you when you need it most.

Ready to deliver

The Adapt-IT team will be ready to help you protect your business against the growing and ever changing threat.

Cyber essentials Tick logo. blue circle with a big Tick in it. The tick is a light green through to a blue colour fade top to bottom. to the Right the Text Cyber Essentials.

Cyber Essentials and the 5 Controls

Cyber Essentials is an entry level cyber certification that allows businesses to protect against the common cyber threats that all businesses face.  it covers five core areas:

What are the cyber essentials controls? 1. Access Control By using a standard user account with least priveledges An administartor account should not be used for day to day activities and limited to only those who need it. Multifactor Authentication needs to be set up on all cloud services. Update Password-based authentication requirementsWhat are the cyber essentials controls? 2. Firewalls and Routers A firewall needs to be a boundary between your networks/devices and the wider internet. All inbound ports should be closed unless there is a documented business need. All Controls need to be app[lied to physical and software firewalls,What are the cyber essentials controls? 3. Malware Protection Antimalware software needs to be installed and updated on a daily basis. Create a list of aproved software that is permitted on your mobile devices.What are the cyber essentials controls? 4. Secure Configuration Remove unrequired Software and configure built in services. Remove or disable any unused accounts. Set and access pin or password to unlock devices.What are the cyber essentials controls? 5. Security UpdatesDont let sogftware vulnerabiltiies be the access point for criminals. Check that your Software is still supported by the vendor. Enable your software to automatically update or applythe patches within 14 days.You can download a copy of the Cyber Essentials question set by clicking

Excel version here

PDF version here

You can download a copy of the NCSC Requirements for Infrastructure document that provides an overview what is needed to be Cyber Essentials ready.

PDF version here

 

IASME Cyber assurance Logos Level 1: yellow circle with a Yellow circle outline, in the middle is a white Tick that has the lower edge bolded with a green line. to the left is the Text: IASME Cyber Assurance in dark green. below this is a solid green box with text in white saying Level 1. Level 2: yellow circle with a Yellow circle outline, on the top left qudrant the Text Audited is curved around the circle from 0 degrees to -90 degrees. in the middle is a white Tick that has the lower edge bolded with a green line. to the left is the Text: IASME Cyber Assurance in dark green. below this is a solid yellow box with text in white saying Level 2.

IASME Cyber Assurance: the Next Level Certification

Important prerequisites to certification

Cyber security is a continuous journey of growth and education. IASME Cyber Assurance is not the beginning of that journey, nor is it the end. Before proceeding at this level, you will first need to demonstrate that your organisation has got the basics in place. The prerequisite for IASME Cyber Assurance certification is an up to date Cyber Essentials certification or IASME Cyber Baseline for organisations outside of the UK.

IASME is the next step in the Cyber security journey focussing on Policy, processes and overall approach to cuyber security.  building on the Cyber essentials certificate it focusses on 13 core areas.

  • Planning and information security
  • Organisation
  • Assets
  • Legal and regulatory landscape
  • Assessing and treating risks
  • Physical and environmental
  • People
  • Policy and realisation
  • Managing access
  • Technical intrusion
  • Backup and restor
  • Secure business operations: Monitoring, review and change management
  • Resiliance: Business continuity, incident management and disaster recovery

IASME Cyber assurance level 1 information graphic. Consists of the IASME Cyber Assurance Level 1 logo. below is a green box with the following text: Risk based and includes key aspects of security such as Incident response Asset Management People Management Physical Controls GDPR The first step along the certification pathway for IASME Cyber assurance Pricing is dependent on the size of the organisation IASME Cyber assurance Level 2 information Graphic At the top of the Graphic is the IASME Cyber assurance level 2 logo Below this is the following text: Involves a department audit of your processes, procedures and controls conducted by an IASME certification body and Assessor A legitimate alternative to other alternative standards The next step after completing IASME Cyber assurance Level 1 certification and our highest level of certification Pricing quoted independently by a certification body

Click here to download the IASME Cyber Assurance Standard

Click here to download the IASME Cyber Assurance Question Set