LHIS is committed to complying with industry standards to facilitate a high quality of service and continuous improvement. This ensures our customers will be confident that they will receive a high level of service from LHIS that meets quality standards and delivers innovation and value.
Awards & Accreditations
LHIS is one of just a handful of organisations nationally that has passed the Health Informatics Standards Accreditation (HISA). This standard includes an onsite audit to review quality and governance measures in use at LHIS. The standard has been developed by the Health and Social Care Information Centre (HSCIC) to allow commissioners of IM&T services within the NHS to build this as a quality standard, that should be looked for when considering future supply.
LHIS adheres to industry and NHS standards for Information Security and Governance. This includes:
- ISB 1596 Securew Email Standard
- Information Governance Toolkit (IGT) compliant
- Cyber Essentials and IASME accreditation
- ISO 27001
- Security vetted staff for sensitive and critical infrastructure projects
- Service management follows the Information Technology Infrastructure Library (ITIL®) that focuses on aligning IT services with the needs of business.
- The LHIS Service Desk function has been accredited by Connecting For Health (CfH) and performance is reported both in real time and through Business Intelligence (BI) reporting.
- PRINCE2 Project Management skills are utilised by the Programme and Change team, which includes a number of PRINCE2 practitioners and implemented in projects throughout LHIS and used by members of staff throughout LHIS.
- LHIS is committed to ensuring workplace standards are adhered to through the implementation of policies for:
- Business conduct
- Health & Safety
- Equality and Diversity
- Recruitment
- Environment and sustainability
- Security and Information governance
IT & PROJECT MANAGEMENT
Cisco Certified Network Associate (CCNA)
We have been monitored, inspected and regulated by the Care Quality Commission ensuring that we meet fundamental standards of quality and safety. The Care Quality Commission sets out what good and outstanding care should look like in order to prevent poor patient care throughout the UK.
Microsoft Certified – Technology Specialist
We hold a Microsoft Certified Technology Specialist certification which demonstrates our skills when using Microsoft technologies, such as the Windows operating system, Microsoft Exchange Server, Microsoft SQL Server or Microsoft Visual Studio.
Microsoft Certified – System Engineer
Here at LHIS we have Microsoft Certified System Engineers working within our organisation for any issues that might arise. These are individuals who have successfully passed exams in which, they have demonstrated dealing with the Microsoft Windows NT, 2000, XP, 2003, or later Microsoft operating system(s), networking, and Microsoft BackOffice server products.
ITIL Certification
ITIL provides vendor-neutral guidelines on where to make specific changes to reduce costs and increase productivity. ITIL is a widely accepted approach to IT Service Management (ITSM), which have been adopted by individuals and organizations across the world. ITIL provides a cohesive set of best practice, drawn from the public and private sectors internationally.
LEARNING & DEVELOPMENT
Learning & Performance Institute – Accredited Learning Provider
LPI accreditation is the globally-recognised quality mark for providers of learning products, technologies, services and facilities. Accreditation continuously raises both learning standards and performance outcomes.
For more information click here.
PRINCE2® (PRojects IN Controlled Environments)
PRINCE2 is a process-based approach for project management providing an easily tailored and scalable method for the management of all types of projects. The method is the de-facto standard for project management in the UK and is practiced worldwide. You can find out more information about PRINCE2 by clicking here.
Care Quality Commission
(CQC)
We have been monitored, inspected and regulated by the Care Quality Commission ensuring that we meet fundamental standards of quality and safety. The Care Quality Commission sets out what good and outstanding care should look like in order to prevent poor patient care throughout the UK.
SECURITY & ASSURANCE
NHS Local Security Management Specialist
In December 2003, the Government launched a new strategy for security management work in the NHS, developed by the NHS Security Management Service (NHS SMS). A key part of this strategy is the introduction of the LSMS in each NHS health body – to provide professional skills and expertise to tackle security management issues across a range of proactive and reactive action. The LSMS will ensure high quality local delivery of this work, within a national legal framework for tackling violence and security management work, and according to training, standards, advice and guidance provided by the NHS SMS.
The overall objective of the LSMS will be to work on behalf of NHS health bodies to deliver an environment that is safe and secure so that the highest standards of clinical care can be made available to patients.
ISB 1596 Secure Email Standard
LHIS has become the first public sector organisation in the country to be able connect its own local email system to NHSmail2, allowing thousands of staff across different organisations to better communicate, and share crucial information more quickly and securely. The landmark project could now help NHS organisations throughout the UK improve the secure sharing of patient information between health and social care professionals.
Click here for more details.
Certified Ethical Hacker
(CEH)
The CEH accreditation focuses on hacking techniques and technology from an offensive perspective. This demonstrated our understanding of the latest developments in the domain, including new hacking techniques, exploits, automated programs as well as defensive recommendations as outlined by experts in the field.
Certified Information System Auditor (CISA)
World-renowned as the standard of achievement for those who audit, control, monitor and assess information technology and business systems. The CISA designation is a globally recognised certification for IS audit control, assurance and security professionals. Being CISA-certified showcases our experience, skills and knowledge whilst demonstrating our ability to assess vulnerabilities in enterprise networks.
IASME
Governance Standard
We meet the IASME Governance standard, these standards are based on international best practice, are risk-based and include aspects such as physical security, staff awareness, and data backup. The IASME standard was recently recognised as the best cyber security standard for companies by the UK Government.
ISO 27001
Security Management System (ISMS)
It is important to provide assurance to our partners that our products and services are delivered in a safe and secure manner. A number of governance frameworks already exist which are intended to provide such assurances (e.g. NHS Information Governance Toolkit (IGT), Cyber Security Essentials etc.). However the ‘industry standard’ is ISO27001:2013.
The Cyber Essential Scheme
(IASME)
The Cyber Essentials scheme provides businesses small and large with clarity on good basic cyber security practice. Cyber Essentials is mandatory for central government contracts advertised after 1 October 2014 which involve handling personal information and providing certain ICT products and services. We are also now working towards the ‘Cyber Essentials Plus’ accreditation which will involve an external body testing for weaknesses in our systems and network.
Metasploit Pro Certified Specialist
(MPCS)
Issued to us by Rapid7 this certification has demonstrated that our organisation represents a proven level of knowledge and use of Rapid7’s products. Security professionals use the award-winning Rapid7 Nexpose vulnerability management software to proactively scan on-premise, cloud, and virtual assets and their applications and services, providing comprehensive, accurate vulnerability coverage. Find out more here.
ISO 27001 Lead Auditor
It is important to provide assurance to our partners that our products and services are delivered in a safe and secure manner. A number of governance frameworks already exist which are intended to provide such assurances (e.g. NHS Information Governance Toolkit (IGT), Cyber Security Essentials etc.). However the ‘industry standard’ is ISO27001:2013.
Certified Forensic Investigation Analyst – Distinction
This is an industry-recognised qualification in forensic investigation and ideal preparation for the 7Safe CFIS advanced course. Increasing our understanding of each stage of a forensic investigation, from evidence seizure through to data investigation and interpretation, to report and presentation of findings. This allows us to undertake the forensic acquisition of an electronic device and work with key forensic investigation products.
