Information security in general practice
Search
Home
Running a practice
Everything you need to know about running a secure practice
Information and cyber security in general practice
Search
Table of contents
About this resource
About information security in general practice
Information security strategy
Business continuity and information recovery
Governance
Roles and responsibilities of your practice team
Information security lead
Internal and external staff roles for managing information security
Allocate resources
Manage access to your systems and your data – passwords and administration rights
Internet and email use
Policies and procedures for managing information security
Crisis and disaster management
Prevention and risk assessment
Asset register
Performing a threat analysis
Analysis of information security procedures and tools
Hidden risks
Electronic sharing of information
Risks of running unsupported software or hardware
Third party software security
Patient communication via email
Social media
Information security workplace culture
Cybersecurity attacks and how to respond
Notifiable data breaches
Information backup
About backups
Equipment needed
Backup storage
Validate and test your backups
Practice roles for the backup and recovery plan
Types of backup
Securing your network and equipment
Software requirements
Network perimeter controls
Software and applications
Vulnerability assessment and penetration testing
Protecting your WIFI network
Cloud computing
Hardware requirements
Hardware
Mobile electronic devices
Protecting and maintaining your physical hardware
Secure destruction and de-identification
Maintenance of your computer hardware, software and operating system
Data recovery and backup restoration
Privacy and managing health information in general practice
Disclaimer
Practice poster
Resources
Search
Search:
Refine search:
Search all sections
Information security strategy
Prevention and risk assessment
Information backup
Securing your network and equipment
Last revised: 21 Apr 2023
Advertising