Trust boards told to ‘grip’ cyber security

Trust boards must demonstrate they have “grip” of their cyber security, NHS England said.

In a letter to providers, joint Department of Health and Social Care and NHS England head of cyber security Tom Wechsler said organisations should formally appoint an executive accountable for breaches.

The NHS and its suppliers have suffered a string of high-profile attacks, including one on pathology provider Synnovis in 2024 that led to a death.

Last week, NHSE CEO Jim Mackey warned risk to the NHS was accelerating, while the chair of the body’s technology committee Mark Bailie stressed it was a direct patient safety issue.

The letter said trusts’ plans for what to do in the event of a breach should also “receive proper scrutiny and assurance”.

Mr Wechsler said: “Geopolitical events and technology developments are increasing the cyber security threats we face. As seen in well-documented incidents across the economy, the impact of a cyber attack is felt across the entire organisation, not just its digital function.”

Read full story (paywalled)

Source: HSJ, 10 June 2026