We have detected that you are using Internet Explorer to visit this website. Internet Explorer is now being phased out by Microsoft. As a result, NHS Digital no longer supports any version of Internet Explorer for our web-based products, as it involves considerable extra effort and expense, which cannot be justified from public funds. Some features on this site will not work. You should use a modern browser such as Edge, Chrome, Firefox, or Safari. If you have difficulty installing or accessing a different browser, contact your IT support team.
Information security management NHS code of practice
The 'Information Security Management: NHS Code of Practice' is a guide to the management of information security, for those who work in or with NHS organisations in England. It's based on current legal requirements, relevant standards and professional best practice, and its guidelines apply to NHS information assets of all types.
This Code of Practice replaced HSG 1996/15 - NHS Information Management and Technology Security Manual.