NHS Information Security Framework Of The NHS Organisation

This top-level information security policy is a key component of [the organisations] overall information security management framework and should be considered alongside more detailed information security documentation including, system level security policies, security guidance and protocols or procedures.

[Enter a short scoping overview of the organisation, its component parts and any other organisations, including those providing or receiving services under contracts that are to be subject to this information security policy. The statement should take account of the NHS Information Governance aims and expectations set out within the Information Security Management: Code of Practice for NHS organisations (see