Show Search Form

Search Results

registered interest	true false
date	exactly: or between: and
answering body
answering dept id
answering dept short name
answering dept sort name
hansard heading
house id
legislature	pref label
question text
tabling member constituency
tabling member printed
uin
answer	is ministerial correction true false date of answer exactly: or between: and answer text answering member constituency answering member printed grouped question UIN question first answered answering member label
tabling member	label

Search

1126878

	registered interest
	date	15/05/2019
	answering body	Department of Health and Social Care
	answering dept id	17
	answering dept short name	Health and Social Care
	answering dept sort name	Health and Social Care
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health and Social Care, what steps he has taken to ensure that NHS England is prepared to defend the NHS against cyber attacks.
	tabling member constituency	Windsor
	tabling member printed	Adam Afriyie
	uin	254786
	answer	answer is ministerial correction date of answer 24/05/2019 answer text <p>The information requested on cyber spending covers sensitive detail about cyber security investment for the National Health Service. In this instance, releasing this information at the level of any annual breakdown may assist in determining the effectiveness of detecting cyber-attacks on the NHS, and could compromise measures to protect NHS IT systems, leaving them vulnerable to future cyber-attacks.</p><p>However, in total, over £250 million will have been invested nationally to improve the cyber security of the health and care system between 2016 and 2021. This excludes both investment by local organisations, and wider national IT investment which supports better security such as Microsoft licensing for NHS organisations.</p><p>Regarding the steps taken to defend against cyber attacks on the NHS, the active cyber defence of NHS organisations is a local responsibility for each organisation to carry out. However, there is national support and practical guidance available to NHS organisations which is primarily delivered by NHS Digital but supported and prioritised for the highest risk organisations by NHS England and the Department. In the event of national-scale incidents that affect many health and care organisations, NHS Digital plays a vital role in coordinating and ensuring appropriate technical remediation, as part of the wider cross-system cyber security response led by the Department.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price grouped question UIN 254785 question first answered 24/05/2019 12:33:05 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	1586 label Biography information for Adam Afriyie

1126877

	registered interest
	date	15/05/2019
	answering body	Department of Health and Social Care
	answering dept id	17
	answering dept short name	Health and Social Care
	answering dept sort name	Health and Social Care
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health and Social Care, how much the National Health Service spent on cyber security in each of the last five years.
	tabling member constituency	Windsor
	tabling member printed	Adam Afriyie
	uin	254785
	answer	answer is ministerial correction date of answer 24/05/2019 answer text <p>The information requested on cyber spending covers sensitive detail about cyber security investment for the National Health Service. In this instance, releasing this information at the level of any annual breakdown may assist in determining the effectiveness of detecting cyber-attacks on the NHS, and could compromise measures to protect NHS IT systems, leaving them vulnerable to future cyber-attacks.</p><p>However, in total, over £250 million will have been invested nationally to improve the cyber security of the health and care system between 2016 and 2021. This excludes both investment by local organisations, and wider national IT investment which supports better security such as Microsoft licensing for NHS organisations.</p><p>Regarding the steps taken to defend against cyber attacks on the NHS, the active cyber defence of NHS organisations is a local responsibility for each organisation to carry out. However, there is national support and practical guidance available to NHS organisations which is primarily delivered by NHS Digital but supported and prioritised for the highest risk organisations by NHS England and the Department. In the event of national-scale incidents that affect many health and care organisations, NHS Digital plays a vital role in coordinating and ensuring appropriate technical remediation, as part of the wider cross-system cyber security response led by the Department.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price grouped question UIN 254786 question first answered 24/05/2019 12:33:05 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	1586 label Biography information for Adam Afriyie

787008

	registered interest
	date	10/11/2017
	answering body	Department of Health
	answering dept id	17
	answering dept short name	Health
	answering dept sort name	Health
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health, what steps his Department is taking to ensure that patients are able to receive treatment in (a) hospitals and (b) primary care settings in the event of a cyber attack.
	tabling member constituency	Houghton and Sunderland South
	tabling member printed	Bridget Phillipson
	uin	112221
	answer	answer is ministerial correction date of answer 15/11/2017 answer text <p>The Department is working with the National Cyber Security Centre, NHS England NHS Digital and NHS Improvement to prepare and rehearse incident response plans and take action to strengthen communications when core computer systems are affected by cyber security incidents.</p><p>A number of changes have been made that aim to make sure that the National Health Service and its systems are as resilient as possible, protecting patient data, ensuring safe patient care, and reducing the impact of cyber-attacks when they next occur.</p><p>To improve resilience in hospitals, £21 million of funding has been allocated to addressing key infrastructure vulnerabilities in major trauma centres and ambulance trusts to reduce the impact on patient access in the event of future cyber-attacks.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price question first answered 15/11/2017 17:43:40 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	4046 label Biography information for Bridget Phillipson

787009

	registered interest
	date	10/11/2017
	answering body	Department of Health
	answering dept id	17
	answering dept short name	Health
	answering dept sort name	Health
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health, what steps have been taken (a) since the WannaCry cyberattack in May 2017 to improve IT security in NHS organisations and (b) to ensure that NHS organisations update their IT systems.
	tabling member constituency	Houghton and Sunderland South
	tabling member printed	Bridget Phillipson
	uin	112222
	answer	answer is ministerial correction date of answer 15/11/2017 answer text <p>The National Health Service has robust measures in place to protect against cyberattacks, and since May we have taken further action to strengthen resilience and guard against future attack, including new, unannounced cyber security inspections by the Care Quality Commission, £21 million in funding to improve resilience in trauma centres, and enhanced guidance for trusts.</p><p> </p><p>Work is underway to determine the fastest and most cost effective way to move the NHS off unsupported operating systems, and we are working with the NHS to ensure unsupported systems are urgently upgraded, removed or isolated. The Department has also signed a Customer Support Agreement with Microsoft that will issue regular patches and updates for all existing Windows devices operating with Windows XP, Windows Server 2003, and SQL 2005.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price grouped question UIN 112274 question first answered 15/11/2017 17:42:12 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	4046 label Biography information for Bridget Phillipson

787010

	registered interest
	date	10/11/2017
	answering body	Department of Health
	answering dept id	17
	answering dept short name	Health
	answering dept sort name	Health
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health, what steps have been taken to educate NHS staff on how to minimise vulnerability to cyberattacks.
	tabling member constituency	Houghton and Sunderland South
	tabling member printed	Bridget Phillipson
	uin	112223
	answer	answer is ministerial correction date of answer 15/11/2017 answer text <p>A new e-learning package has been produced for staff in the health and care system, with sections covering risks and responsibilities with regards to cyber security.</p><p> </p><p>The Department is working with the National Cyber Security Centre, NHS England, NHS Digital and NHS Improvement to prepare and rehearse incident response plans and take action to strengthen communications when core computer systems are affected by cyber security incidents.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price question first answered 15/11/2017 17:40:47 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	4046 label Biography information for Bridget Phillipson

755816

	registered interest
	date	04/09/2017
	answering body	Department of Health
	answering dept id	17
	answering dept short name	Health
	answering dept sort name	Health
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health, what changes have been made to the NHS' cyber security following the cyber attack in May 2017.
	tabling member constituency	Hemsworth
	tabling member printed	Jon Trickett
	uin	7028
	answer	answer is ministerial correction date of answer 12/09/2017 answer text <p>The Department developed an immediate response plan, working with the National Cyber Security Centre, NHS Digital, NHS England, NHS Improvement, and the Care Quality Commission.</p><p> </p><p>Your Data: Better Security, Better Choice, Better Care is the Government’s Response to data security and was published in July 2017. This document accepts the 10 Data Security Standards proposed by Dame Fiona Caldicott, the National Data Guardian, and sets out the timescales for how the Government plans to deliver key actions on cyber security and data sharing in a high level implementation plan.</p><p> </p><p>The immediate response plan and the high level implementation plan is being taken forward as part of the formal Data and Cyber Security Programme which includes a range of measures to build resilience and responsiveness to the health and care sector against a cyber attack.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price question first answered 12/09/2017 14:51:49 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	410 label Biography information for Jon Trickett

758222

	registered interest
	date	06/09/2017
	answering body	Department of Health
	answering dept id	17
	answering dept short name	Health
	answering dept sort name	Health
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health, what steps his Department has taken to improve the security of NHS passwords since the WannaCry cyber attack in May 2017.
	tabling member constituency	Leicester South
	tabling member printed	Jonathan Ashworth
	uin	9272
	answer	answer is ministerial correction date of answer 11/09/2017 answer text <p>The global WannaCry cyber attack in May 2017 has reaffirmed the potential for cyber incidents to impact directly on patient care and the need for our health and care system to act decisively to minimise the impact on essential front-line services. Weak passwords were not a vulnerability exploited in the WannaCry attack.</p><p> </p><p>Passwords are one element of ensuring the cyber security of National Health Service organisations, and improving them is part of a wider set of standards as introduced in the Government’s response Your Data: Better Security, Better Choice, Better Care published on 12 July 2017. The Government’s response accepts the 10 Data Security Standards recommended by the National Data Guardian. A copy of the response is available at the following link:</p><p><a href="https://www.gov.uk/government/news/government-responds-on-cyber-security-and-data" target="_blank">https://www.gov.uk/government/news/government-responds-on-cyber-security-and-data</a></p><p> </p><p>The NHS contract has been changed so that NHS organisations are formally required to adopt data security standards including security training for staff and annual reviews of processes.</p><p>NHS Digital is supporting local organisations to strengthen cyber security by sharing best practice across the health and care system and carrying out on-site assessments.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price question first answered 11/09/2017 14:37:53 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	4244 label Biography information for Jonathan Ashworth

732540

	registered interest
	date	26/06/2017
	answering body	Department of Health
	answering dept id	17
	answering dept short name	Health
	answering dept sort name	Health
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health, what assessment he has made of the adequacy of IT security systems within NHS trusts.
	tabling member constituency	Ellesmere Port and Neston
	tabling member printed	Justin Madders
	uin	1066
	answer	answer is ministerial correction date of answer 04/07/2017 answer text <p>Cyber resilience in the health and care system is an issue that the Government takes very seriously.</p><p> </p><p>My Rt. hon. Friend the Secretary of State for Health commissioned Dame Fiona Caldicott, the National Data Guardian, and the Care Quality Commission to review data security in September 2015. These reviews were published in July 2016 and identified the need for steps to be taken to protect health and care systems against cyber attack. Both the National Data Guardian and the Chief Executive of the Care Quality Commission wrote to National Health Service trusts highlighting key steps they needed to take to improve cyber security. We will be replying to their report shortly.</p><p> </p><p>Following the 12 May 2017 ransomware attack, the Chief Information Officer for health and care is undertaking a review into the attack which is expected to conclude in the autumn.</p><p>That review will provide an assessment of what actions are required to mitigate the risk and impact of a future cyber attack on the NHS, looking in particular at infrastructure, incident response and resilience, and ensuring that this learning is widely shared across all parts of the healthcare system.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price question first answered 04/07/2017 11:04:35 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	4418 label Biography information for Justin Madders

732542

	registered interest
	date	26/06/2017
	answering body	Department of Health
	answering dept id	17
	answering dept short name	Health
	answering dept sort name	Health
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health, what estimate he has made of the cost to the public purse of the recent cyber attack on the NHS.
	tabling member constituency	Ellesmere Port and Neston
	tabling member printed	Justin Madders
	uin	1052
	answer	answer is ministerial correction date of answer 03/07/2017 answer text <p>The identifiable cost of emergency measures put in place to specifically address the National Health Service ransomware attack on 12 May 2017 was approximately £180,000. These costs were borne by NHS Digital and NHS England from internal budgets. Information relating to any expenditure incurred by individual local NHS trusts or other NHS organisations is not collected centrally.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price question first answered 03/07/2017 13:44:39 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	4418 label Biography information for Justin Madders

1125935

	registered interest
	date	10/05/2019
	answering body	Department of Health and Social Care
	answering dept id	17
	answering dept short name	Health and Social Care
	answering dept sort name	Health and Social Care
	hansard heading	NHS: Cybercrime
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Secretary of State for Health and Social Care, what recent assessment he has made of the level of vulnerability of NHS Microsoft operating systems to cyber attack.
	tabling member constituency	Greenwich and Woolwich
	tabling member printed	Matthew Pennycook
	uin	252873
	answer	answer is ministerial correction date of answer 20/05/2019 answer text <p>We are supporting National Health Service organisations to upgrade their existing Microsoft Windows operating systems, allowing them to reduce potential vulnerabilities and increase cyber resilience.</p> answering member constituency Thurrock answering member printed Jackie Doyle-Price question first answered 20/05/2019 14:15:35 answering member 4065 label Biography information for Jackie Doyle-Price
	tabling member	4520 label Biography information for Matthew Pennycook