Government Launches Cyber Security Review in Care Sector
The Government has launched an important evidence review of the state of cyber security in the care sector. The state of cyber security in adult social care provides critical insights into the challenges faced by care providers and highlights areas for improvement.
This report outlines the progress made in raising awareness and strengthening defences, while also identifying gaps that still need to be addressed.
The project was conducted by Ipsos UK in partnership with the Institute of Public Care at Oxford Brookes University between July 2023 and May 2024.
According to the report, an estimated 4 in 5 care providers (79%) had used some well-established approaches to identify cyber threats within the last 12 months (17% did not use any measures and 4% did not know if they had).
The report revealed that access to cyber security expertise provided by Better Security, Better Care through the Digital Care Hub was consistently associated with better cyber security practices when compared with the average.
Care providers who accessed this expertise:
- had better awareness of the likely impact of a cyber incident
- were more likely to have various rules, controls, policies, and procedures in place to manage cyber security day-to-day and respond to incidents
- were more positive about training and staff awareness on cyber security.
Stephen Kinnock MP, Minister of State for Social Care, emphasised the importance of having a stronger evidence base on the level of risk facing the care sector, stating:
“The adult social care cyber security landscape report provides this and outlines how the work of the Better Security, Better Care programme, a grant-funded DHSC programme, has brought cyber security up the agenda for care providers.”
“Whilst this is a positive step in the right direction, the report has highlighted that there is still work to be done in order to realise the strategic aims of the health and care cyber security strategy to 2030. The government is committed to continuous investment in digital and cyber security for the adult social care system. We will continue to build on the work of the Better Security, Better Care Programme, and work with providers to increase standards and adopt the National Cyber Security Centre’s (NCSC) Cyber Assessment Framework.”
“Given the financial challenges facing the sector, heightened cyber security is of the utmost importance to prevent both harm to those receiving care and support, and increased financial costs from cyber incidents.”
“I want to thank the hard work of all care providers who continue to invest resources into the safety and security of those working in and drawing on care. The government recognises the value of cyber security within adult social care and its importance in protecting the wider system, including the NHS.”
Michelle Corrigan, Programme Director of the Digital Care Hub, welcomed the recognition of the Better Security, Better Care programme and the ongoing government support, stating:
“This report provides vital evidence and will enable us to improve the support Digital Care Hub offers to the sector. It is encouraging to see the impact of the Better Security, Better Care programme acknowledged in this report, highlighting the progress made in bringing cyber security to the forefront for care providers. We welcome the government’s commitment to continued investment in digital and cyber security, as this remains a critical issue for the sector.”
“Our focus remains on supporting care providers to not only understand the nature of cyber security risks but also to implement good practices in their daily operations. Cyber security is not just about policies and compliance—it is about embedding safer ways of working that protect the people receiving care and those providing it. We will continue to work alongside providers to ensure they have the knowledge, tools, and confidence to strengthen their cyber resilience.”
Digital Care Hub has published a summary of the key findings and implications of the report.
The full report, The state of cyber security in adult social care, is available on Gov.UK website.
