Stephen Elgar

1
Management of security for the CRS applications
used by London Trusts the second workshop with
BT and NPfIT11-Sept-07 A CRS audit toolkit
for Trust IG and Security staff

• Stephen Elgar
• NHS London Information Governance Manager

2
Contents

• Context
• Concept
• Next steps

3
A CRS audit toolkit for Trust IG and Security
staffContext

• What is an audit trail?
• What happened / who did what?
• Context of Care Record Service and Guarantee to
  the Public
• Use of Smartcards as an authentication device -
  who did what?
• All CRS applications are connected to the spine
  some activity can be across several systems, e.g.
  card, demographic spine Choose and Book
• Expressions of concern about this area of
  function SHA London Caldicott Guardian IG
  forum January 2007
• Original plan for a review by Nicola Gould Tom
  Cairns by June 2007
• Request from 1 London Trust for a shared resource
  August 2007

4
A CRS audit toolkit for Trust IG and Security
staffConcept

• Current proposal Nick Schlanker Stephen Elgar
• Short piece of work to develop this set of tools
• For the most part explaining and enabling use of
  existing functions by Jan 08

Introduction summary document for all London
and related national applications Detailed
document for each relevant feature for each
application Training (from BT as part of
deployment) Some functions may involve a Service
Request Email address for queries Care Record
Service Toolkit
5
A CRS audit toolkit for Trust IG and Security
staffCriteria for success

• ?
• IG specialists, Caldicott Guardian, Information
  Managers and Trusts Execs have a place to go to
  for help and full guidance as to what is
  available.
• Trusts able to assess skills and time required to
  use the tools

6
A CRS audit toolkit for Trust IG and Security
staffNext steps

• Agree who should be involved
• Agree products
• Then
• Review products / signoff by IG / Caldicott
  Guardian members
• BT LSP
• BT National Spine Products
• Trust volunteers
• National IG team
• National RA team

7

• Stephen Elgar
• NHS London Information Governance Manager
• s.elgar_at_nhs.net
• 0207 969 5748

8
Any Questions??