SA¹ú¼Ê´«Ã½

Tuesday 22 October 2024
Salisbury Foundation Trust

FOI_8067

Internal Reference Number: FOI_8067

Date Request Received: 26/07/2024 00:00:00

Date Request Replied To: 29/07/2024 00:00:00

This response was sent via: By Email

Request Summary: Interest in the cybersecurity of the UK government

Request Category: Private Individuals

 
Question Number 1:
How many cyber incidents (threat and breach) occurred in the last two years (1st of July 2022-1st of July 2024)?
 
Answer To Question 1:
Please see attached exemption notice.
 
Question Number 2:
For each of the following cyber incident types, please indicate if your organisation experienced them in any month from the 1st of July 2022- 1st of July 2024. If yes, specify the month(s) in which they occurred:

· Phishing attacks: Yes/No. If yes, which month(s)?

· Ransomware attacks: Yes/No. If yes, which month(s)?

· Distributed Denial of Service (DDoS) attacks: Yes/No. If yes, which month(s)?

· Data breaches: Yes/No. If yes, which month(s)?

· Malware attacks: Yes/No. If yes, which month(s)?

· Insider attacks: Yes/No. If yes, which month(s)?

· Cloud security incidents: Yes/No. If yes, which month(s)?

· Social engineering attacks (excluding phishing): Yes/No. If yes, which month(s)?

· Zero-day exploits: Yes/No. If yes, which month(s)

 
Answer To Question 2:
Please see attached exemption notice.
 
Question Number 3:
For each of the following supplier types, please indicate if any cyber incidents related to them occurred between the 1st of July 2022-1st of July 2024. If yes, specify the volume of cyber incidents that occurred:

· IT service providers: Yes/No

· Medical equipment suppliers: Yes/No

· Software vendors: Yes/No

· Cloud service providers: Yes/No

· Data storage/management companies: Yes/No

· Telecommunications providers: Yes/No

· Security service providers: Yes/No

· Managed service providers (MSPs): Yes/No

· Third-party payment processors: Yes/No
 
Answer To Question 3:
Please see attached exemption notice.
 
Question Number 4:
During the period from 1st of July 2022 -1st of July 2024, did your organisation experience any of the following impacts due to cyber incidents?

· Were any appointments rescheduled due to cyber incidents? Yes/No

· Was there any system downtime lasting more than 1 hour? Yes/No

· Did any data breaches occur? Yes/No

· Were any patients affected by data breaches? Yes/No
 
Answer To Question 4:
Please see attached exemption notice.
 
Question Number 5:
What percentage of your cybersecurity budget is allocated to each of the following supply chain security technologies? Please indicate the percentage for each:

· Third-party risk assessment tools: ___%

· Vendor management systems: ___%

· Supply chain visibility and monitoring solutions: ___%

· Secure data sharing platforms: ___%

· Multi-factor authentication for supplier access: ___%

· Endpoint detection and response (EDR) for supplier systems: ___%

· API security solutions: ___%

 
Answer To Question 5:
Please see attached exemption notice.
 
To return to the list of all the FOI requests please click here

Our staff at SA¹ú¼Ê´«Ã½ Hospital have long been well regarded for the quality of care and treatment they provide for our patients and for their innovation, commitment and professionalism. This has been recognised in a wide range of achievements and it is reflected in our award of NHS Foundation Trust status. This is afforded to hospitals that provide the highest standards of care.

Person Centred & Safe

Professional

Responsive

Friendly

Progressive

SA¹ú¼Ê´«Ã½, SA¹ú¼Ê´«Ã½ Hospital, Odstock Road, Salisbury, Wiltshire, SP2 8BJ
T: 01722 336262 E: sft.pals@nhs.net
© 2024 SA¹ú¼Ê´«Ã½
Trust Values