Riverlite provides expert and accurate help to support our Hospice and healthcare Care customers, with the completion of the NHS Data security and protection toolkit. As part of any submission specific data and metrics are required, which often the IT team needs to provide.

We understand our responsibilities in providing Compliance officers with the correct data and procedures to complete the online self-assessment tool, so they can successfully measure their performance against the National Data Guardian’s 10 data security standards.

Riverlite has been working with our health care customers for over 5 years on the toolkit provision and we meet the ‘Standards Met' on the NHS DSPT website.

We practice daily the 10 DSPT key requirements because we have implemented the overlapping standards of the ISO 27001 Information Security Management System, giving our customers assurance and advice on their Compliance work. 

• Gather technical information related to the infrastructure to enable a local hospice to complete their DSPT submittal
• Make recommendations on the environment to ensure that it is DSPT compliant, for example, email filtering, internet filtering, firewall controls, access control & password policy, identifying and managing end of life software and systems
• Carrying out vulnerability assessment and carrying out remedial task and activities
• Simulated Phishing attacks to identify training needs for individual users
• Technical controls to assist local hospice comply in the form of a login banner on the PC and Internet banner highlighting that Internet traffic is monitored
• Assisted writing their IT Acceptable Use Policy

Riverlite understand the importance of protecting personal data and the individual that the data relates to, as such we fully endorse and adhere to the principles of the General Data Protection Regulation (GDPR). As part of the ISO 27001 certification and our compliance to GDPR Riverlite has policies and procedures in place for the following:

• Personal Confidential Data
• Staff Responsibilities
• Training
• Managing Data Access
• Process Reviews
• Responding to Incidents
• Continuity Planning
• Unsupported Systems
• IT Protection
• Accountable Suppliers

Riverlite are ISO 27001 certified.  Read the case study that our information security management system (ISMS) specialist partner Intertek wrote on our commitment and journey to certified ISO compliance.