Our CISO / Cybersecurity Resource Slides

---

NHS Supply Chain Assurance:

This is a sample of the assurance efforts required for Vendors / Suppliers to conduct business with the NHS. Simple box-checking won't be enough to provide  adequate supply chain assurance.

Defence in Depth 2023:

Every year I reproduce this slide with the latest thoughts of what DID or Defence in Depth Looks like for that year. Zero Trust is a focal point for 2023 and we are still down the rabbit hole to define what a ZT model will look like in NHS Healthcare.

Systemic Risk:

A recommended read about Systemic Risk is the Book named "The Great Reboot" by Bob Zukis that delves into how society has rapidly evolved since COVID. Systemic Risk refers to a societal breakdown of norms that has several triggers and a varying degree of consequential impact.

Steeple refers to the crux of modern day systemic risk, the Steeple or Pestle Framework, as illustrated.

vCISO Framework Adoption Model:

This is our NHS Framework adoption model which evolves quarterly.  

This model shows how we go about adopting the cyber risk framework.

Credit: The middle part of this illustration (Cyber Defence Dependency)  is from the Cyber Defense Matrix, a quality book from Sounil Yu, from JupiterOne.

vCISO Services

This illustration is a high-level view of some of the activities undertaken by CISOs. vCISOs are part-time staff, hence need to deliver a blend of the services required to get a client further in their maturity journey. The key is to focus on the priority areas to accelerate improvement. These activities can stretch many layers deep and require significant effort & investment.

Changing face on NHS IT and Cyber #ICS

A new chapter in technology and security will need to happen at scale and in collaboration with NHS partners.

Integrated Care Systems, Boards , and Partnerships are here. Value can only be achieved by exploring great depths of opportunity.

 NHS England » What are integrated care systems?