WQ93295 (e) Tabled on 24/06/2024

How is the Welsh Government monitoring and countering cyber-attacks on NHS patient data?

Answered by Cabinet Secretary for Health and Social Care | Answered on 03/07/2024

The Welsh Government provides a multi-layered approach to cyber threat and monitoring and response to safeguard its extensive and critical digital infrastructure. This is led by the Cyber Resilience Unit (CRU) which provides cyber and resilience leadership to NHS Wales.

Cyber threats are on the rise, and the CRU works in partnership with national infrastructure and security groups to provide updates and recommendations from its regular interaction with the National Cyber Security Centre (NCSC) within GCHQ. This includes proactive audits to systematically assess the robustness, efficacy, and resilience of NHS Wales organisation’s cyber defences and information security protocols.

The Welsh Government increased national funding for health boards in 2023-24 to improve levels of cyber and resilience. This has improved incident response capabilities, led to a dynamic and regularly updated incident response plans that align closely with current threats.