Outstanding CE+ recommendations are now being monitored via NHSL’s Datix system and the Digital Risk Management Forum.
NHSL were audited by NIS in 2023 and achieved a compliance status of 68%. Monthly meetings taking place with the Digital Service Managers to monitor progress. Auditors comments:
In a clear commitment to the NIS Audit programme the audit preparations were well-organised with the staff meetings arranged well in advance. The evidence presented was cross-referenced to individual controls it would however have been strengthened by a more extensive narrative to offer explanation to the relevance of the documents provided.
The board has achieved a high level of compliance across the board, with 13 categories and 46 of the 68 sub¬ categories achieving a compliance of 60% or more; six categories attained levels of over 80%. The board has therefore achieved two of the 60-60-0 Key Performance Indicators, with the third close to achievement; being prevented by only seven subcategories with <30% compliance.
Overall compliance is at 68% a noteworthy achievement, showing strength across the organisation and a high level of performance. This analysis is against the new framework controls which has 42 (10%) new or revised controls in comparison with the framework used in the first audit cycle; for interest only, against the old controls this would represent an overall compliance of 76%.
Based on the auditor's feedback an action plan has been developed to target the 7 subcategories < 30% compliant as a priority.
