SAFETY & SECURITY Better Protected
Michelle Corrigan, Programme Manager at Better Security, Better Care explains how the Data Security and Protection Toolkit is helping care managers to protect staff, client, and business information in the digital age.
In today’s increasingly digital age, cyber-attacks and data breaches are becoming ever more common. Last year 39% of UK businesses suffered a cyber-attack, while the average cost of a cyber security breach for a small business in the UK is more than £10,000. And of course, many organisations are attacked without realising it.
And it’s not just digital information that is at risk; paper-based data also needs protecting. Few social care providers see themselves as data and cyber security experts and it can be challenging to keep up with developments.
This is where the Data Security and Protection Toolkit (DSPT) comes in.
WHAT IS THE DATA SECURITY AND
PROTECTION TOOLKIT (DSPT)? The DSPT is a helpful annual self-assessment tool that shows care providers what they need to do to store and share people’s paper or digital information safely, and to protect their business from the risk of a data breach or cyber-attack. All CQC- registered care providers should complete the DSPT at least once a year to reassure everyone they work with that they are taking data security seriously.
https://www.digitalsocialcare.co.uk/data-security-protecting-my-information/data-security-and-protection-toolkit/ GETTING STARTED WITH THE DSPT
Better Security, Better Care is the official national and local support programme to help adult social care providers complete the DSPT. Better Security, Better Care’s network of 28 Local Support Organisations (LSOs) offer free, expert support to all adult social care providers completing the DSPT. Support is available both in person and online on a 1-2-1 or group basis and includes workshops and webinars.
https://www.digitalsocialcare.co.uk/data-security-protecting-my-information/better-security-better-care/ https://www.digitalsocialcare.co.uk/data-security-protecting-my-information/better-security-better-care/local-support-partners/
BENEFITS OF THE DSPT
As well as helping care services check and improve their data and cyber security arrangements, the DSPT offers a number of other benefits.
Providers planning to access the Digital Transformation Fund to introduce digital social care records will need to have completed the DSPT to show they have good data protection arrangements in place.
If a care provider wishes to access shared NHS patient information systems to support faster, well-informed decision making, then they also need to have the DSPT in place.
The DSPT is recognised by the Care Quality Commission (CQC) and can also help evidence a care service’s compliance with data protection legislation as well as the CQC Key Lines of Enquiry (KLOEs).
If a care service was unlucky enough to experience a cyber- attack and had a cyber insurance policy in place, they could use the DSPT as evidence to demonstrate to their insurer that
- 20 - Image credit: Georg Arthur Pflueger on Unsplash
they had good systems in place to reduce the risk and impact of an attack. They would likely be required to show that their IT policies and procedures meet the terms and conditions of their cyber insurance policy wording.
BLUEBIRD CARE: PEACE OF MIND WITH THE DSPT
Nick Griffiths, Lead Quality, Compliance & Development Manager at Bluebird Care Franchises explains how using the Data Security and Protection Toolkit (DSPT) centrally has freed up time for staff and given him the peace of mind that comes with knowing Bluebird Care franchisees are doing everything they can to protect both staff and customer data. And with 200 locations across England, that’s no mean feat.
Nick was made acutely aware of the value of the DSPT for all Bluebird Care franchisees aſter the company’s data was stolen in a widespread cyber-attack that impacted both health and care services last year.
He said: “The DSPT is a sensible and safe guide for us to have in place. In August last year the rostering provider we used – which was also linked to NHS clinical services – was hit by a cyber- attack. It took down the data of thousands of employees across the Bluebird Care network. That resulted in mass upheaval for the company for quite some time. We are still experiencing challenges from it now, six months down the line. It made us realise we needed additional safeguards in place to prevent something similar happening again.”
NUMBERS AREN’T A BARRIER – ONE DSPT FOR MANY SERVICES
Nick became aware of the DSPT when it was first announced that CQC-registered care providers in England should complete the self-assessment annually to demonstrate they have good data and cyber security practices in place. However, since Bluebird Care operates a predominantly private-pay care model, he didn’t think it would apply to
www.tomorrowscare.co.uk
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38
