One wonders the governance processes the NHS trusts followed in London if they were aware of the challenges of third party supplier security?

← Back to Blog

One wonders the governance processes the NHS trusts followed in London if they were aware of the challenges of third party supplier security? Especially given that it was known that ‘Guy’s and St Thomas’ NHS Foundation Trust, which runs five major hospitals in the London area, has failed to meet the UK health service’s data security standards in recent years and acknowledged as recently as April that “cybersecurity remained a high risk” to its operations, according to publicly available documents that outline board of directors’ meeting’

In January, the board of directors raised questions about the security of digital links between hospital computer systems and those of third-party companies. One trust was found to have ‘considerable scope for improvement’ by the UK ICO.

With these known issues, how will the insurance companies involved in the incident respond, or will it be left to self insurance, in this case the tax payer, to foot the bill.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC Synnovis NHS

#cybersecurity #cyberriskmanagement #cyberattacks

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7209457046109257729