Close Menu
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Facebook X (Twitter) LinkedIn
Facebook X (Twitter) LinkedIn
Information Security BuzzInformation Security Buzz
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Subscribe
Information Security BuzzInformation Security Buzz
Home - News & Analysis - NHS App Data Leak Shows Need for Overhaul of Security Approval Process
News & Analysis

NHS App Data Leak Shows Need for Overhaul of Security Approval Process

ISBuzz TeamBy ISBuzz TeamSeptember 30, 20154 Mins Read
Share LinkedIn Twitter Facebook Copy Link Email
Shein App Caught Sending Clipboard Info To External Servers
Shein App Caught Sending Clipboard Info To External Servers
Share
Facebook Twitter LinkedIn Email Copy Link
Quick AI Summary
ChatGPTClaudeGeminiGrokPerplexityDeepSeekCopilot

NHS App Data LeakAs the NHS uses a more diverse range of application suppliers, the organisation still needs to ensure that data protection standards are met. The recent news that many NHS-accredited smartphone healthcare applications are leaking data demonstrates that NHS England’s Health Apps Library isn’t approving software that meets public sector standard requirements.

Simone Hume, Head of Public Sector at Cloud Services Provider Outsourcery comments: “The NHS is facing a critical challenge to save money and become more efficient at treating patients. Deploying innovative applications will be central to achieving this, but there is no room to cut corners by using app developers who do not meet the highest standards. Data must be stored in secure areas and applications must be enterprise grade. Both the leak of patient data from apps on the Health Apps Library and the recent 15-hour outage of Skype show the need for organisations to take care about the tools they depend upon.”

Outsourcery currently provides cloud services for the Berkshire Healthcare NHS Foundation Trust, delivering Software-as-a-Service (SaaS) Unified Communications (UC) solution Lync. One of the benefits of SaaS is that organisations like the Trust can take advantage of the latest technology, such as the recent launch of Microsoft’s latest UC offering, Skype for Business. SaaS users can easily migrate from Lync to Skype for Business with the support of CSPs.

Hume explains: “Skype for Business from Outsourcery is delivered from Outsourcery’s Pan Government Accredited platform, available through the Digital Marketplace G-Cloud Framework”. Serving specialist mental health and community health services, the Trust uses the G-Cloud to enhance collaboration, increasing productivity with a cost-effective solution. In addition, Outsourcery’s O-Cloud services are accredited to ‘Official’ level, delivered on the secure Public Services Network (PSN) (formerly IL3), meeting CESG security principles..

Hume concludes: “Our public sector services have been certified to run government classified information at ‘Official’ (including ‘Official sensitive’) levels, providing connectivity via the internet and the Public Services Network, meeting data sovereignty and security specifications for the sector. Our work with the Berkshire Healthcare NHS Foundation Trust and other healthcare providers has put us on the frontline of the demand for healthcare in the UK. Apps used by healthcare providers, as with the any part of the public sector, need to maintain extremely high standards in their approach to data protection.”

About Outsourcery

Outsourcery is a leading UK-based Cloud Services Provider (CSP), with one of the broadest offerings of cloud-based services built on Microsoft technology and best-of-breed hardware from Dell and HP, for businesses of all sizes. The company aims to remove the need for organisations to own and manage on-premises IT, Unified Communications and Collaboration applications and infrastructure.

Outsourcery offers hosted software applications (Software-as-a-Service), cloud infrastructure (Infrastructure-as-a-Service) and next generation Unified Communications and Collaboration solutions based on Microsoft Skype for Business. Outsourcery can offer both hybrid cloud and fully integrated cloud solutions to meet the needs of customers, partners and the UK public sector alike. End-users range from start-ups to FTSE-100 businesses and Outsourcery’s extensive partner base, of over 500 IT and telo providers, includes Virgin Media Business and Vodafone.

Outsourcery’s O-Cloud platform has been certified to run government classified information at ‘Official’ and ‘Official sensitive’ levels over the internet. This gives Outsourcery CESG Pan Government Accreditation (“PGA”) to meet data sovereignty and security specifications for the public sector. The company’s Assured O-Cloud platform has also been certified to run government classified information at ‘Official’ and ‘Official sensitive’ over the Public Services Network (PSN) and is aimed at central government departments. Outsourcery’s service portfolio is listed on the Digital Marketplace as part of the government’s G-Cloud initiative and it was the only UK finalist shortlisted for Microsoft’s worldwide Government Partner of the Year 2015 award.

Outsourcery is a Microsoft Certified Gold Partner with a total of five competencies, of which three are gold. As well as being the first company outside of the US to be named Microsoft’s worldwide ‘Hosting Solutions Partner of the Year’, Outsourcery is also a Microsoft CityNext Partner and Cloud OS Network Partner. Outsourcery was a founding member of the Cloud Industry Forum (CIF), fully certified to the CIF Code of Practice and Outsourcery is also a corporate member of MSDUK, a member of TechUK and holds ISO 27001, ISO 9001 and ISO 14001 standards.

Outsourcery has 110 employees, with offices in Manchester, London and Leicester. It was the UK’s first certified carbon neutral CSP.

ISBuzz Team
  • ISBuzz Team
    Air Canada Data Breach: BianLian Extortion Group Claims A Massive Heist Contrary To Airline’s Earlier Statement
  • ISBuzz Team
    Unprecedented DDoS Attack Rocks The Web: Tech Giants Reveal A Digital Tsunami
  • ISBuzz Team
    CISA Flags High-Severity Adobe Acrobat Reader Flaw Amid Active Exploits
  • ISBuzz Team
    Curl Security Alert: Patching A Critical Bug Averting Potential Cyber Catastrophe

The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.

Share. Facebook Twitter LinkedIn Email Copy Link

Related Posts

Visual data is the blind spot in enterprise security: that’s about to change

May 4, 20267 Mins Read

Making stolen data worthless: why security must start with the data

March 30, 20265 Mins Read

Meta’s Smart Glasses Privacy Scandal Expands After Sama Credentials Found on the Dark Web

March 10, 20264 Mins Read
ISB-Bora-Side-Bar

No se ha podido establecer conexión. Error 429

 
ISB-Bora-Side-Bar
Black ISB Logo

Information Security Buzz is an independent resource that provides the experts’ comments, analysis, and opinion on the latest Cybersecurity news and topics

X (Twitter) LinkedIn Facebook RSS

Working With Us

  • About Us
  • Advertise With Us
  • Contact Us

Write For Us

  • How To Contribute

The Pages

  • Privacy Policy
  • Cookie Policy
  • AI Policy
  • Terms & Conditions
  • Copyright Notice

Information Security Buzz and all its contents are copyright © 2014-2025. All rights reserved. All third-party trademarks are recognized.

Type above and press Enter to search. Press Esc to cancel.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}