DEC-JAN 2018CIOAPPLICATIONSEUROPE.COM 19TOWARDS A MORE RESILIENT AND CYBER-PREPARED APPROACH a part to play but those in senior roles can have a significant influence to make sure that things are put in place sooner rather than later.For example, you wouldn't leave your front door unlocked, but not having a secure password on your computer is the cyber equivalent to doing just that. We need all staff to take some basic and sensible steps to keep digital information safe. Good cyber security is the responsibility for every member of staff in an organisation, and good `cyber hygiene' is as important and can be as straightforward to implement as good hand hygiene in a hospital. Security starts on the front line, not in the IT department. Does everyone have basic training in cyber security? Do they understand their personal responsibility to keep data safe? This `cyber hygiene' includes simple things such as keeping passwords safe and changing them regularly; never letting anyone other than the named person use a Smartcard; not clicking on unverified links; keeping mobile devices safe and secure; and ensuring that individuals log off or lock screens when they move away from a device. Every single device needs to be patched with the latest software. IT provided by CCGs and Commissioning Support Units is ultimately their responsibility and should be maintained by them, but if GPs have bought other software themselves, for example telephone systems that run on PCs, then that's their responsibility. You can't just install something and forget about it - particularly if it's connected to your network.While filters remove the majority of malicious emails, occasionally one gets through, so we all need to be sensible and ask ourselves `Was I expecting this email? Does it make sense? Does the sender normally send an email like this?' If the answer to any of these questions is `no', then don't open it, and don't click on any links within suspicious emails. Don't get tempted to look. "If in doubt - block it out". Hover the mouse over the link and you'll see where it's directing you. If it's not what you were expecting, you'll know it is spam, and you should report it to your local IT team immediately so others won't receive it. We need to invest in people, across all disciplines, because data security isn't just a technology issue or just something the ICT team have responsibility for
< Page 9 | Page 11 >