Skip to main content
Creating a new NHS England: Health Education England, NHS Digital and NHS England have merged. More about the merger.

Data Security Standard 8 - unsupported systems

Date Published:
28 September 2022

Current Chapter

Data Security Standard 8 - unsupported systems

View all

Next Chapter

Know your estate (all of IT) (8.1.1 - 8.4.3)

This guidance relates to the 2022-23 (version 5) standard.

Overview

Guidance and support is available from NHS Digital to ensure risk owners understand how to prioritise their vulnerabilities.  

There is a clear recognition that not all unsupported systems can be upgraded, and that financial and other constraints should drive intelligent discussion around priorities.

Value for money is of utmost importance, as is the need to understand the risks posed by those systems which cannot be upgraded. It’s about demonstrating that analysis has been done and informed decisions were made.

No unsupported operating systems, software or internet browsers are used within the IT estate.

Please refer to further note on professional judgement, auditing and GDPR.

Last edited: 28 September 2022 11:11 am

Chapters

  1. Data Security Standard 8 - unsupported systems
  2. Know your estate (8.1.1 - 8.4.3)