Current landscape:
The NHS is delivering care in a world where cyber risk is now a patient safety issue. The 2024 ransomware attack on Synnovis disrupted London pathology services, forcing widespread cancellations and manual workarounds, and ultimately costing the provider an estimated £32.7m—illustrating how a single incident can ripple across whole care pathways.
Across the system, policy is moving from compliance to resilience. The DHSC’s Cyber Security Strategy for Health and Social Care 2023–2030 sets a 2030 target for cyber-resilient organisations, underpinned by NHS England guidance and the Data Security and Protection Toolkit (DSPT) annual assurance.
At the same time, data platforms and shared analytics are scaling—72 hospital trusts are now using the NHS Federated Data Platform—raising the stakes for robust governance, access control and incident response.
Why this event is timely:
Government proposals would ban public-sector ransom payments and mandate incident reporting, reshaping how boards, SIROs and CISOs prepare and respond. Organisations need to align policies and playbooks now, in step with NCSC ransomware guidance and ICO expectations.
This also sits squarely within the government’s Fit for the Future: 10-Year Health Plan for England—a vision that leans on safe, trusted digital services and data to re-model care. Cyber readiness is therefore foundational to delivering the plan’s promises.
Key event topics & learner outcomes:
- From compliance to resilience (2030 goal) - What “good” looks like under the 2023–2030 health and social care cyber strategy.
- Ransomware readiness without ransom - Legal and policy implications of the proposed public-sector ransom-payment ban; reporting thresholds; board duties.
- Securing data platforms and shared care analytics - Practical controls for identity, RBAC/MFA and supplier assurance across the FDP and other shared platforms.
- Lessons from Synnovis: continuity as clinical safety - What the incident taught us about laboratories, referral pathways and mutual aid.
- People, culture and the frontline - Targeted awareness for phishing and social engineering in an AI era; making “secure by default” the easiest path for staff.
- Governance & assurance made practical – Streamlining board reporting, DSPT evidence, and alignment with broader health data strategy (Data Saves Lives).
Why attend:
- Cut through the noise. Get the latest policy signals (ransomware proposals, 2030 resilience target) translated into actionable steps for ICBs, trusts and suppliers.
- Learn from real incidents. Use first-hand lessons from Synnovis to pressure-test your own continuity and communications plans—before you need them.
- Deliver the 10-year vision safely. Cyber is a prerequisite for the NHS’s next decade of digital care; this programme links security controls to clinical outcomes and citizen trust.
- Leave with artefacts, not just ideas. Expect templates and checklists you can reuse for DSPT evidence, board papers, and tabletop exercises aligned to NCSC/ICO guidance.
Headline Sponsor
