Hosting to NHS CFH Standards • THE FACTS
Agenda • Background • What is Hosting to NHS CFH standards? • Benefits for Practices • Financial implications • Addressing Practices’ concerns • Finding out for yourself
Background • 23% of practices in England have migrated to hosted systems provided from supplier data centres • These practices have: • reduced their local IT administration effort • removed the risk and impact of local clinical server failure • improved their disaster recovery options
What is Hosting to NHS CFH standards? • NHS CFH has introduced standards to ensure that hosted services meet practices’ performance and security requirements • Key elements of the standards are: • Zero data loss in the event of a disaster • Service levels for system performance • Stringent information governance requirements
Zero Data Loss • The supplier is required to store copies of practice data in two separate, secure locations. • This ensures that ifthere is a disaster at one of the data centres, the second data centre can continue to provide service to practices.
Service Levels • GPSoC service levels are designed to measure how well the supplier is providing services to practices. These service levels include call answer times, availability of the system and system response times. • Where a supplier does not meet the service levels they are required to take remedial action and will face deductions from their service charges
Data Confidentiality and Security • Suppliers must demonstrate that their system and processes meet stringent information governance requirements to ensure the security of patient data and confidentiality
Benefits for Practices • Local effort is much reduced. The practice no longer needs to carry out daily back ups and upload software updates for the clinical system • Improved response times for branch surgeries • Removes the requirement for an expensive local clinical server (although a less powerful server may continue to be required e.g. for document management) • Increased data security
Benefits for Practices • Performance of the hosted services is monitored 24/7 • the supplier is required to fix the faults that they find • this reduces the chance that the first time a problem is discovered is when a practice opens at the start of the day • Disaster recovery • a practice can be quickly set up in an alternative location with access to their system and their patients’ medical records • this is helpful both in a disaster and for planned practice moves
Financial Implications • Until end March 2009 practices can receive a DES Component 4 payment if they migrate to/are using a system that is hosted to NHS CFH standards. • Where a practice is migrating to a system that is hosted to NHS CFH standards the deployment costs will largely need to be met locally but ongoing service charges will be funded by NHS Connecting for Health.
Addressing Practices’ concerns • Areas you may want to consider: • N3 Connection • Confidentiality • Third Party Applications • Data Ownership • Performance of the Hosted Service
Addressing Practices’ concerns • N3 Connection • Some practices are concerned about relying on N3 to access their data at the supplier’s data centre. Loss of N3, power and access are just some of the things that can go wrong at a practice. See the GPSoC website for details of the business continuity services offered by suppliers to reduce the impact of these potential problems. • Confidentiality • Practices and patients are rightly concerned about unauthorised access to patient data. The NHS CFH standards for hosting include strict controls over system access and records of all access to a patient’s record. In addition, expert security testing is undertaken to test and protect against unauthorised access to the hosted facility.
Addressing Practices’ concerns • Third Party Applications • Not all third party applications that are available for use with practice based clinical systems are compatible with the hosted systems – check with suppliers when you are considering migration to a hosted system. • Data Ownership • There are no changes to data ownership as a result of moving to a hosted solution • Performance of the Hosted Service • Some practices experience longer response times on a hosted system. This will vary depending on the system – check with suppliers and with other practices who are already using the hosted service
Finding out for yourself • Information on the current status of GPSoC supplier’s systems and their plans for achieving hosting to NHS CFH standards can be found at www.connectingforhealth.nhs.uk/gpsoc/systems/ • Talk to other Practices & PCTs who are using hosted solutions
Additional information • Any questions about hosting to NHS CFH standards can be submitted to: • firstname.lastname@example.org