1-2 of 2 results for subject:Software
Librarians' tools
- Search time
- 0.241 seconds
- Solr query time
- 0.003 seconds
- Search query
- subject:Software
- We searched for
- subject_t:Software OR subject_t:Apps OR subject_t:"Computer applications" OR subject_t:"Computer software" OR subject_ses:90662
Type
House
Session
Year
Department
Member
More
Primary member
Answering member
Legislative stage
Legislation
Subject
More
Publisher
My Lords, the design goals for the NHS app should be to make it as easy and frictionless as possible for legitimate users to access the system, while making it as difficult and frictionful as possible for people trying to gain unauthorised access. But there is a natural tendency to focus on the first part of this equation as developers believe in the systems they build and find it hard to put themselves in the shoes of the cunning and resourceful attackers who will try to break them. Given this dynamic, can the Minister confirm that the NHS has a red team tasked with trying to identify all possible vectors of attack on the NHS app, and that the requisite resources will be put into mitigating any risks that they identify?
My Lords, the design goals for the NHS app should be to make it as easy and frictionless as possible for legitimate users to access the system, while making it as difficult and frictionful as possible for people trying to gain unauthorised access. But there is a natural tendency to focus on the first part of this equation as developers believe in the systems they build and find it hard to put themselves in the shoes of the cunning and resourceful attackers who will try to break them. Given this dynamic, can the Minister confirm that the NHS has a red team tasked with trying to identify all possible vectors of attack on the NHS app, and that the requisite resources will be put into mitigating any risks that they identify?
The noble Lord is absolutely correct on getting that balance right between the two; that is why the NHS has a safeguarding reference group on exactly this, which has been putting in protections as well as messaging patients, telling them to be aware and that they have the opportunity to redact their records if they are concerned. There are other features, such as multi-factor authentication and making sure that, for log-in with facial ID, you cannot have anyone else in the picture, to ensure that people are not being coerced. So, there are a number of measures in place, but I completely agree that we need to keep them under review with user groups checking all the way.
To ask His Majesty’s Government what measures they have put in place to mitigate the risk of people being coerced into showing their confidential medical records to third parties as records become universally available through the NHS app.
To ask His Majesty’s Government what measures they have put in place to mitigate the risk of people being coerced into showing their confidential medical records to third parties as records become universally available through the NHS app.
The Government want people to have access to their own records. For most, online record access is beneficial but for a minority, having access could cause harm or distress. In many cases, practices can identify these patients and ensure that safeguarding processes are in place. Furthermore, to access the NHS app, users must prove their identity through the NHS log-in and, before entering their record, are advised what to do if they are being pressurised to share their information.