NHS Must Empower CCIOs and Security Leads to Tackle New Data Threats

ImprivataOpinion Article by Dr Saif F Abed, EMEA Medical Director at Imprivata.
Take the perfect recipe for a new model of care. A well thought out local digital roadmap to improve efficiency through IT, a forward thinking acute trust, collaborative partners across care settings and a novel vanguard model, all combine to create a project with the potential to achieve local and national integrated care objectives.

Then a massive clinical data breach strikes, patient data is compromised, and the project collapses, missing a chance to help transform care for thousands or even millions of patients.

With sustainability and transformation plans, the Five Year Forward View and ambitious local projects across the country leading the way for population based care, the NHS is on the brink of success for integrated health economies. This hard work must not be undermined by avoidable security risks.

New security challenges of integrated care mobility
The realisation of genuine integrated care does carry inherent new data security challenges.

Integrated care means more clinics moving from the hospital to the GP surgery. It means more specialist clinicians carrying out home visits, or moving between multiple hospitals. There will be more hybrid nursing, more community nursing, and a much greater reliance on mobility, outside of the four walls of a clinic.

The only way we can manage the health of entire populations is if we have a more mobile workforce, but we still need to have the same elite standards of security, whilst providing professionals with the right information, at the right time, wherever they need it. So how can a balance be struck?

Mobility, clinical workflow and security - the current status
Mobility, clinical workflow and security are the three key elements to creating any integrated care strategy, whether that is one at a local level or one being driven nationally.

A great deal of progress has already been made around clinical workflows in relation to technology since the end of the National Programme for IT. Similarly vanguard sites are now starting to tackle the challenge of mobility, so that more patients are managed in the community.

But security has received the least attention and is to date the most deficient area of the three pieces of the puzzle. We are only now seeing real security investment come into fashion as a result of threats seen in the US and some EU states recently and as a result of advice from bodies like GCHQ to improve security standards.

Others too have called for action. The Care Quality Commission and Dame Fiona Caldicott's Office of the National Data Guardian, have both recently called on the NHS to take steps ahead of reviews of NHS organisations' data security. And health secretary Jeremy Hunt has insisted that the NHS has "has not yet won the public's trust", when it comes to handling their data.

Technology is not the biggest problem
Technology is not the biggest weakness in data security, it is the human factor, one of the reasons why we are still seeing data breaches and fines imposed on the NHS from the Information Commissioner's Office.

It is true, that whilst effective IT in an integrated care chain can allow patient data to be accessed in a more timely and secure way, other more cumbersome technologies can lead to problems. For example, in healthcare settings today, it is not unknown for clinicians to become frustrated by log-on loading times, each time they insert their smartcard to access patient information. When fast user switching systems are not in place, doctors may leave smartcards in the system, avoiding hindrance to clinical workflows, but also creating security risks including the potential for inappropriate access to information from colleagues and the loss of an audit trail.

In reality, the way people handle data, and how they access devices, is often the challenge. The vast majority of data breaches take place because of humans mishandling information, not because of a cyber hack.

Empowering CCIOs and SIROs to tackle security challenges across health economies
But it is the human element that offers the answer to data security risks, including new challenges presented by integrated care. The NHS must now empower the right people in order to tackle security challenges.

At present many parts of the NHS do not even have a chief information security officer or a senior information risk owner (SIRO). This is something that must change, with calls for such a role at board level, being voiced by the CQC and Dame Fiona's office.

Chief clinical information officers (CCIOs) can also play an extremely important role here, and are in many ways the most useful people in an NHS organisation to get major IT projects adopted, engaged and used in a way that is useful for patients.

But so often CCIOs are not being given executive powers needed to make the most difference, something that must change with urgency.

CCIOs are simply not being invited to participate as effectively as possible. As someone who has worked in the NHS as a doctor, and who now works in the supplier community, I have seen from both sides how there is often a need to reach out to the CCIO for them to take part in a meeting.

CCIOs need to be given the executive powers to lead. The same is needed for SIROs, so that clinical flows, mobility and security are not addressed in isolation.

The NHS must not pigeonhole clinicians and information security leads to clinical or security matters. Each deals with the whole picture from different angles. There must be collaboration between them, and without executive powers, the train goes nowhere.

Those individuals can be key to ensuring these things happen, not only in the trust, but more widely across health and social care.

The more players in an integrated care setting, the more collaboration you need. Ideally the same expertise would be reflected in each of the component organisations, to allow the security and workflow needs of acute, community, mental health, primary and social care to be tackled with cohesion.

But most importantly, health economies need to understand where they are deficient, where they are strong, where they need to invest, and where they don't have enough resource. The first step is for all the component organisations to come together and understand what they are capable of, and what they are not. Only an integrated approach to security can work for the integrated care now about to happen.

Most Popular Now

SAP IoT Startup Accelerator

The SAP IoT Startup Accelerator is a structured co-innovation program for selected B2B startups focusing on the Internet of Things. The Accelerator helps startups grow and scale their businesses alongside...

Read more

Paving the Way for eHealth Interoperabil…

The EURO-CAS project launched operations today to deliver the eHealth Conformity Assessment Scheme for Europe in 2018. This scheme will help European health systems assess the conformity of eHealth products...

Read more

SkinVision Unveils Breakthrough Algorith…

Dutch mobile health startup SkinVision has revealed its new algorithm that can detect most common forms of deadly skin cancer. Previously focused on detecting melanoma skin cancer, the app can...

Read more

eHealth Hub Solution Match Call: Hospita…

Solution Match is one of the services offered by the EU-funded initiative eHealth Hub, intending to promote and boost up commercialization. The eHealth Hub aims to provide long-term support to...

Read more

Wearable AI System can Detect a Conversa…

It's a fact of nature that a single conversation can be interpreted in very different ways. For people with anxiety or conditions such as Asperger's, this can make social situations...

Read more

Doctrina Raises €1,020,000 of New Capita…

Doctrina, a start-up company transforming the traditional transfer of knowledge between pharmaceutical companies and pharmacies, has raised a total of €1,020,000 in series A funding. The investment will enable Doctrina...

Read more

Biovision World Life Science Forum 2017

4 - 6 April 2017, Lyon, France. Biovision World Life Science Forum is fostering a unique approach to meet, connect and collaborate between international decision-makers from the academic, civil society, policy-making...

Read more

DIY Live Cell Imaging Using a Smartphone

A recent study from Uppsala University shows how smartphones can be used to make movies of living cells, without the need for expensive equipment. The study is published in the...

Read more

Horder Healthcare Uses IMS MAXIMS Electr…

Healthcare provider Horder Healthcare is to deploy an electronic patient record (EPR) from software provider IMS MAXIMS, in order to improve care for thousands of patients and facilitate its digital...

Read more

Brain-Computer Interface Allows Complete…

A brain-computer interface that can decipher the thoughts of people who are unable to communicate could revolutionize the lives of those living with complete locked-in syndrome according to a new...

Read more

Deep Learning in Healthcare Summit

28 - 01 March 2017, London, UK. Discover advances in deep learning tools and techniques from the world's leading innovators across industry, academia and the healthcare sector. Learn from the experts...

Read more

Pitch Your Digital Health Solution at th…

The second eHealth Roadshow, promoted by the new EU-funded eHealth Hub project, will take place on the 6th of April in Stuttgart, Germany, in the frame of the Medtec Europe...

Read more
(HEALTH IT) SPACE - Take a look at who has just Joined