7.1 Network Security centres on the hardware and cabling infrastructure provides Network connectivity for the CSU. This will include such elements’ as routers, switches, firewalls ‘gateway and external cabling. 7.2 Due to their exposure, gateway devices are particularly vulnerable to attack and, if not protected, can act as the initial infection point of a Network. Gateway devices will therefore be protected by appropriate firewalls. 7.3 Security features, service levels, and management requirements of all Network services will be identified and included in any Network services agreement, whether these services are provided or outsourced. 7.4 The ability of the Network service provider to manage agreed services in a secure way will be determined and regularly monitored, and the right to audit will be agreed. 7.5 The security arrangements necessary for particular services, such as security features, service levels, and management requirements, will be identified. The organisation will ensure that Network service providers implement these measures in line with an assessment of the Risk and Assurance Framework. 7.6 The CSU will ensure that all connections to external Networks and systems conform to all relevant NHS Security Policies and standards, such as the NHS Code of Connection and supporting guidance. 7.7 Security features of Network services include the following areas supported by operational ICT Security Protocols and Procedures technology applied for security of Network services, such as authentication, encryption, and Network connection controls technical parameters required for secured connection with the Network services in accordance with the security and Network connection rules, and procedures for the Network service usage to restrict access to Network services or applications, where necessary 7.8 Wireless Networking offers a great deal of flexibility to the user however this flexibility requires balancing against strong security which protects the CSU Network and ICT Infrastructure . 7.9 Wireless Networking offers a deal of flexibility to the user however this flexibility requires balancing against strong security which protects the CSU Network and ICT Infrastructure Access Layer Service Set Identifier Encryption, and Authentication 7.10 Security of third party access 7.11 Access Control No external agency (NHS or otherwise) will be given access to any of SECSU networks unless that body has been formally authorised by the Information Security Manager in conjunction with the IT Manager to have access and/or to exchange data. All non-NHS agencies will be required to sign security and confidentiality agreements with SECSU;
7.1 Network Security centres on the hardware and cabling infrastructure provides Network connectivity for the CSU. This will include such ‘gateway elements’ as routers, switches, firewalls and external cabling. 7.2 Due to their exposure, gateway devices are particularly vulnerable to attack and, if not protected, can act as the initial infection point of a Network. Gateway devices will therefore be protected by appropriate firewalls. 7.3 Security features, service levels, and management requirements of all Network services will be identified and included in any Network services agreement, whether these services are provided or outsourced. 7.4 The ability of the Network service provider to manage agreed services in a secure way will be determined and regularly monitored, and the right to audit will be agreed. 7.5 The security arrangements necessary for particular services, such as security features, service levels, and management requirements, will be identified. The organisation will ensure that Network service providers implement these measures in line with an assessment of the Risk and Assurance Framework. 7.6 The CSU will ensure that all connections to external Networks and systems conform to all relevant NHS Security Policies and standards, such as the NHS Code of Connection and supporting guidance. 7.7 Security features of Network services include the following areas supported by operational ICT Security Protocols and Procedures technology applied for security of Network services, such as authentication, encryption, and Network connection controls technical parameters required for secured connection with the Network services in accordance with the security and Network connection rules, and procedures for the Network service usage to restrict access to Network services or applications, where necessary 7.8 Wireless Networking offers a great deal of flexibility to the user however this flexibility requires balancing against strong security which protects the CSU Network and ICT Infrastructure . 7.9 Wireless Networking offers a deal of flexibility to the user however this flexibility requires balancing against strong security which protects the CSU Network and ICT Infrastructure Access Layer Service Set Identifier Encryption, and Authentication 7.10 Security of third party access 7.11 Access Control No external agency (NHS or otherwise) will be given access to any of SECSU networks unless that body has been formally authorised by the Information Security Manager in conjunction with the IT Manager to have access and/or to exchange data. All non-NHS agencies will be required to sign security and confidentiality agreements with SECSU;
SECSU%20ICT%20Security%20Policy%20v4.0%20(1).docx