I wonder if there is potentially vulnerability in your IT systems.

The Trust systems are patched when needed to ensure compliance, and we review all CareCert alerts and bulletins and take appropriate action. The Trust carries out penetration tests on its applications and network.

Do you for example communicate with GPs electronically and is the interface secure?

The Trust transfers various letters via an Electronic Document Transfer (EDT) HUB. We also transfer pathology results into GP computer systems. All interfaces are in line with national approved directives/standards.

Are you able to audit PAS, PICS and the Portal for inappropriate access and patterns?

Yes.