NHSmail for Community Pharmacists 28th February 2010

1. NHSmail for Community Pharmacists 28th February 2010 NHSmail �.. Safe, Secure Communication

4. Benefits of NHSmail Accessibility A National Directory

5. Benefits of NHSmail Calendars can be shared within and between organisations Send fax and SMS text messages direct from email Email address remains the sameeven if user changes organisations

6. Benefits of NHSmail 24 hours a day7 days a week365 days a year ����helpdesk

7. Benefits of NHSmail On line training package availablenww.connectingforhealth.nhs.uk/nhsmail/training/

8. Benefits of NHSmail - corporate As a pharmacy Group you could send to: All staff in an identified group � eg Boots All Staff in an identified group in a selected PCT area All staff in an identified group and selected seniority � eg Senior Pharmacists Using Dynamic Distribution Lists

9. Benefits of NHSmail - corporate Set up generic mailboxes that can be accessed and shared between departments or groups of pharmacists Cro-pct-disp.BootsC607@nhs.net

10. Benefits of NHSmail - corporate Centrally funded: It is free for staff and the organisation at the point of use Service SLA�s in use and guaranteed not to lose any data

11. Benefits of NHSmail - corporate Secure service � How is it a secure service?

12. Service Security: Principles Compliance with CFH Security Principles Compliance with the HMG Manual of Protective Security Compliance with HMG standards in order to gain RESTRICTED accreditation Least privilege Defence in depth 6 separate security zones Separate perimeter security zones for N3, GSI and Internet with no shared infrastructure Only authenticated traffic allowed beyond the perimeter security zone to further security zones Control value shall not exceed the data being protected Elevating trust as data passes through control points Separation of duties Physical and logical

13. Service Security: In Practice Same security model as secure Government/ Military systems NHSmail is an accredited RESTRICTED service (IT Security Health Check Service) List X environment (SECRET/Military services) Physical/ Procedural security associated with processing classified data All Staff on the project hold Government SC/DV Status and are Counter Terrorist checked CESG regular penetration testing, inspections and audit Strict ITIL management (2 man rule, change control etc) CTAS code reviews on any bespoke code Dual site service with no single point of failure

14. Service Security: Secure Boundary Aligned to the RESTRICTED (IL3) boundary NHS NHSmail (*.nhs.net) Central Government xGSI (*.x.gsi.gov.uk) GSI (*.gsi.gov.uk) GSE (*.gse.gov.uk) GSX (*.gsx.gov.uk) CJX (*.police.uk *.pnn.police.uk *.cjsm.net) SCN (*.scn.gov.uk) Local Government GCSX (*.gcsx.gov.uk) All email sent between these domains do not need encrypting as the entire environment/infrastructure is accredited with strict end point access controls Email sent to or received from any other domain is untrusted (open to forging, interception or alteration)

15. Endpoint (User) Security: Technical All access methods use 128 bit SSL/TLS Web based access connecting through: Internet A combination of a virtual keyboard and a password field Default no attachment downloading unless the user overrides In the future this may be automated via end point compliance scanning 30 minute time out N3/GSI Standard password field used for login Default allows attachment downloading with no ability to turn off 8 hour timeout Mobile access Only via Exchange Activesync (direct push) � no Internet IMAP/POP support Self wipe capability Policy applied to supported devices (password, lock etc) http://nww.connectingforhealth.nhs.uk/nhsmail/technology/nhsmailmobiledevices.pdf

16. Endpoint (User) Security: Policy Every Organisation signs up NHS: IGSoC Non NHS: Third Party Access Agreement Every User signs up Acceptable Use Policy Displayed on every page

17. Endpoint (User) Security: MS Outlook By default Outlook data is protected by operating system independent �Compressible Encryption�. This prevents it from being read with a text editor via its encoding algorithm.

18. NHSmail � Pharmacist Package NHSmail is available now for all Community Pharmacists A series of Pilots to run from Dec to April 2010  Guidance and support to be given to establish a consistent and efficient rollout of NHSmail. Emphasis on: firewall changes standardised naming directory entries Maximising benefits

19. NHSmail � Pharmacist Package An email account for each dispensary site An email account for each pharmacist N3 Filter changes completed User guide Helpdesk guidance Invitation to a training / registration session

20. NHSmail � Pharmacist Package PCT / Supplier to provide: Project Lead ICT / Training support Helpdesk (in addition to Nat helpdesk) Communications to Pharmacists Spreadsheet of Dispensary Sites Spreadsheet of Pharmacists

21. NHSmail � Benefits to the Pharmacist

22. NHSmail � Pharmacist Package Pilots running to date:

23. Who is using NHSmail? 490,000 email accounts on the service � 41% year on year growth 2.3 million emails sent/received daily - 28% year on year growth 55% of users use the service for clinical communications (2007 survey)

24. A developing service NHSmail is now using Microsoft Exchange 2007 Why? The gold standard in usability and functionality Enhanced mobile connectivity Integrates with other products/services � an opportunity to develop a strategy for NHSmail as a unified communications platform

25. A developing service

26. Further information Websites: www.connectingforhealth.nhs.uk/nhsmail nww.connectingforhealth.nhs.uk/nhsmail To register: www.nhs.net Contact us: feedback@nhs.net