Smartcard Registration Security and Efficiency
The Electronic Staff Record (ESR) and NHS Connecting for Health have developed a new secure, scalable and streamlined system to capture and manage employee identity and control access to electronic staff and patient records. Integrated Identity Management (IIM) significantly improves information governance and patient confidentiality, while reducing the administration costs of managing employee identity in the NHS.
Meeting the QIPP Challenge
IIM delivers real efficiency and productivity savings in line with the NHS Operating Framework and supports the delivery of the quality, innovation, productivity and prevention (QIPP) challenge:
- Implements best practice with secure and efficient system registration processes that are transferable into the newly emerging NHS structure.
- Promotes better integration between Human Resources and Registration Authority functions, removing duplication and delivering proven efficiency gains.
- Using the ESR interface to CIS, organisations can check employee identity and arrange Smartcard access at the same time using a single IIM approach that avoids dual processing across HR and RA departments.
- The ESR interface to CIS allows organisations to activate a new employees access to a Smartcard immediately, and to suspend it immediately when they leave. Any changes in employment, such as new starter, job change, leaver etc are reflected immediately in ESR, thereby providing the most responsive and efficient method of enabling, modifying or withdrawing access to computer systems linked to the NHS Spine.
Controlling Access to Staff & Patient Data
The NHS is required to meet the NHS Employment Check Standards (September 2012) for all staff, volunteers, contractors etc. providing NHS services. Responsibility for these checks sits with the Human Resources (HR) department. Similarly, robust identity checks (using the same identity management standards) are carried out by an NHS organisation's Registration Authority (RA) to verify an individual's identity before allowing access to NHS Care Records Service (NHS CRS) applications.
IIM allows NHS organisations to make significant cost savings by combining these parallel activities, and allowing access to electronic patient records on computer systems linked to the NHS Spine.
This is achieved by implementing two new applications:
User Identity Manager (UIM) is the new workflow software for managing access to NHS CRS Compliant Systems via Smartcards. It replaced the previous Registration software (Calendra) from March 2011.
The ESR Interface to UIM Human Resources functions currently update ESR when changes are made regarding an employees assignment to an established position. The ESR interface to UIM is triggered by such changes and automatically updates an individuals access rights to NHS CRS compliant systems, reflecting the access requirements of their new position. It enables the management of access control via a single point of data the change to the employees position within ESR.
Click here to find out more information about Implementing the ESR interface to UIM.