BT Health report highlights NHS cyber security concerns
BT Health has released findings from two surveys indicating significant concerns about cyber security within the National Health Service (NHS) among staff and the general public.
The surveys reveal a substantial gap in confidence in existing cyber defence measures among NHS staff, with only 36% expressing confidence in current defences despite 94% understanding their role in combating cyber threats. This highlights a disparity between awareness and belief in the effectiveness of security measures.
The UK public shares concerns, with 60% fearing that possible cyber-attacks could compromise critical NHS systems, potentially leading to disruptions in vital services.
Legacy systems are a notable point of vulnerability. Sixty-four per cent of NHS staff report difficulties with isolated and inoperable patient data, with outdated systems being a primary cause. Such systems lack the robust cyber security features of newer technology, thereby increasing potential risks and impeding digital healthcare transition.
Training deficiencies are also apparent. Sixty per cent of frontline NHS staff indicate a lack of regular cyber security training, pointing to it as a one-off occurrence rather than a continuous effort. Consequently, this results in a significant barrier to achieving comprehensive cyber preparedness among healthcare professionals.
The UK public acknowledges this gap in training, with 55% considering it important for NHS staff to receive systematic training in new technologies. Public sentiment underscores the link between informed staff and better healthcare delivery.
Professor Sultan Mahmud, Director of Healthcare at BT, acknowledges the rapid evolution of cyber threats that challenge healthcare systems. He states, "The NHS is rightly focused on saving lives, so it can be hard to stay ahead of cyber security threats with the landscape shifting so quickly. Threats targeting healthcare have grown in frequency and sophistication, endangering patient care and compromising vital services. BT logs 2,000 signals of potential cyber attacks every second, totalling 200 million per day across sectors. With over 1.7 million employees, the NHS is the UK's biggest employer, so empowering this workforce is vital."
He further emphasises the necessity for collaboration to address these challenges: "Across the NHS, high awareness of cyber risk is overshadowed by a lack of preparedness. Moreover, significant frustrations with legacy systems are affecting care, exacerbating training gaps. Having worked in the NHS before joining BT, I understand many of these challenges and the importance of bringing together leading minds. Through initiatives like our Clinical Advisory Board and Vanguard Programme, BT Health is enabling collaboration between healthcare, policy, and business to drive meaningful change. A cyber-resilient NHS will be a better NHS for everyone."
Professor Natasha Phillips, former Chief Digital Nurse to NHS England and Founder of Future Nurse, further highlights the life-and-death implications of cyber security in healthcare. "In healthcare, cyber security isn't just about protecting data; it's about protecting lives. Nurses are often the first point of care. To deliver life-saving and compassionate treatment, they depend on easy access to secure systems. As we embrace digital innovation, we must ensure that all clinicians have the confidence, training, and tools to work safely and free from disruption. Ultimately, building a resilient NHS requires a united effort, where technology, training, and trust come together."
Dr Mateen Jiwani, a practising GP and BT Clinical Advisory Board member, adds that for effective support, the NHS must provide a secure environment and regular training. "Clinicians are incredibly busy, constantly working hard for their patients. To provide meaningful support, the NHS must value their time and provide a secure, uninterrupted, place to work alongside regular cyber training and assessments that encourage prevention, rather than cure."
