Guidance and resources

Multi-factor authentication (MFA) policy

This policy will ensure that MFA is used on digital systems throughout the health sector, with particular requirements on accounts that are remotely accessible or have privileged access to systems.

Cyber security strategy for health and adult social care to 2030

Find out about the joint NHS England and Department of Health and Social Care (DHSC) cyber security strategy for health and adult social care to 2030.

Cyber security charter for suppliers to the NHS

A commitment from technology suppliers to the health and social care system.

Data Security and Protection Toolkit assessment guides

These 10 guides provide more information on the 10 data security standards, including suggestions and examples of how the standards might be achieved.

Public Key Infrastructure (PKI) documentation

The documentation set is an essential component of any PKI and defines an agreed set of rules for the operation and management of the PKI.

Cyber security guide for executive and non-executive directors

This guide aims to help NHS executive and non-executive directors understand how cyber security could affect their own NHS organisation and how to become more resilient to cyber threats and attacks.

Guidance on protecting connected medical devices

7-step guidance for healthcare providers to mitigate the risk of security incidents involving network connected medical devices.

Network segmentation architecture patterns for connected medical devices

Guidance for health and care organisations.

Backups and Office 365 guidance

An introduction for health and care organisations

Guidance for procuring and deploying connected medical devices

This guidance provides UK professional health providers with cyber security guidance for procuring and deploying Connected Medical Devices (CMDs).

Guidance on keeping safe and secure whilst working from home

This guide will help you to keep safe and secure whilst working from home. It includes some simple security tips, both online and offline, that will help to ensure our work and data remains effective and secure.

Guidance on phishing emails

Find out how you can stay safe and vigilant against phishing emails, including advice on how to spot a suspicious email and how to report it.

Help us to stay safe and secure

As part of our Keep I.T. Confidential campaign, we've highlighted some examples of cyber security threats that we all need to be aware of.

Monitoring services

We offer a range of national and local monitoring services, designed to identify vulnerabilities, uncover suspicious behaviour and block malicious activity. Find out more about using these services.