COVER STORY
safeguarding notes. In the wrong hands, that data could be used to scam, pressure or exploit someone. Digital routes can make harm faster and harder to spot.
YOU MAY BE THE VICTIM EVEN IF YOU ARE NOT THE TARGET
It is easy to think, ‘Why would anyone target us?’ The truth is, they may not. Many cyber incidents are automated, opportunistic or linked to another organisation.
Supply chains are a key part of the risk. Care providers rely on digital care planning, e-rostering, payroll, NHS and local authority portals, IT support, finance systems, devices and cloud services. In adult social care research, 44% of incidents among providers who had experienced an attack originated from a third-party organisation.
So, ask: who has access to our data, where is it stored, how quickly would we be told about an incident, and how would we keep care going if a supplier system was unavailable?
AI BRINGS OPPORTUNITY AND RISK
Artificial intelligence could help social care reduce admin, use information better and identify risks earlier. But it also raises questions about privacy, bias, accountability and security. Criminals are using AI too, including to create more convincing phishing emails, fake invoices and impersonation attempts.
The AI in Care Alliance, which is currently being formed, will aim to help the sector explore ethical and responsible use of AI. The message is not ‘don’t innovate’. It is ’innovate safely’, with governance, accountability and strong data protection from the start.
TRAINING IS CRITICAL
Staff are oſten the first line of defence. Cyber security training should be treated as seriously as manual handling, medication management, fire safety or safeguarding. We would not expect staff to manage medicines safely without training. We should not expect them to spot phishing or respond to a suspected cyber incident without training either.
Training should be practical and repeated. Staff need to know why multi-factor authentication matters, how to recognise
“So, ask: who has access to our data, where is it stored, how quickly would we
be told about an incident, and how would we keep care going if a supplier system was unavailable?”
Digital Care Hub’s cyber security guidance, DSPT support and Digital Health Check service can help providers take stock, spot gaps and prioritise next steps. The Health Check is free for eligible adult social care providers and offers practical, judgement-free recommendations.
THIS ISSUE IS NOT GOING AWAY
Digital innovation can make care safer, more efficient and more person-centred. But only if safety and security are built in. For care home managers and owners, the message is simple: digital safety is care safety. Protecting data is part of protecting people, supporting staff and protecting the future of your business.
www.digitalcarehub.co.uk
suspicious messages, how to report concerns quickly and when to pause and check before clicking.
WHAT TO DO NOW
No provider can remove every risk. The aim is to reduce the chance of an incident, respond quickly if something happens and recover safely.
• Complete and regularly review the Data Security and Protection Toolkit.
• Use multi-factor authentication wherever possible. • Keep soſtware and devices updated. • Limit access so staff only see what they need. • Back up important information and test that backups work. • Review supplier arrangements. • Train staff and refresh awareness regularly. • Have a simple incident response plan. • Do not click links or open attachments in unexpected emails. Go directly to official websites instead.
15
www.tomorrowscare.co.uk
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36
