 |
answer text |
<p>We estimate there are approximately 2,300 machines in the National Health Service
currently still operating on Windows XP which is no longer supported by Microsoft.
To be compliant with the mandatory Data Security and Protection Toolkit, NHS organisations
must operate on supported systems or have plans in place to mitigate the risk such
as segregating those machines from the network. There are valid reasons why some machines
cannot be upgraded from Windows XP, primarily where they run essential locally developed
clinical systems that cannot be upgraded or replaced.</p><p>We are supporting NHS
organisations to upgrade their existing Microsoft Windows operating systems, allowing
them to reduce potential vulnerabilities and increase cyber resilience.</p><p>We signed
a multi-million pound contract with Microsoft in 2018 to support the NHS to upgrade
their existing Microsoft Windows operating systems onto Windows 10.</p><p>All health
and care organisations that have access to NHS patient data must annually complete
NHS Digital’s Data Security and Protection Toolkit. This details the standards we
expect them to adhere to and Data Security Standard 8 advocates that no unsupported
operating systems, software or internet browsers are used within the IT estate.</p>
|
|
