Menu
No data was found
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
For clinics, care providers and practices holding the most sensitive data there is.
Healthcare and care providers hold the most sensitive category of personal data that exists, are inspected on how they handle it, and increasingly have an annual security submission to make on top of everything else. Meanwhile the day job doesn’t pause: residents need care, clinics need to run, and the person who ends up owning IT is usually a registered manager or a practice manager with no spare hours. This page is about taking that off them.
The data is as sensitive as data gets. Medical records, medication, safeguarding, mental capacity, next of kin. A breach here isn’t a commercial inconvenience, it’s a harm to the person whose information it is, and it’s reportable to the ICO and relevant to your regulator.
The compliance load lands on one person. CQC asks how information is protected. Providers accessing NHS systems or NHSmail have the Data Security and Protection Toolkit to complete every year. Both are answerable, but somebody has to gather the evidence, and that somebody is usually your registered manager at nine o’clock at night.
Going digital exposed the building. Electronic care records only work if staff can reach them where care happens. A lot of care homes moved to digital records and then discovered the wifi doesn’t cover the first floor, the extension or the far end of the corridor, so staff write things down and type them up later, which defeats the point.
And turnover is relentless. Agency staff, bank staff, new starters every month. Shared logins become normal because they’re quicker, and then nobody can show who accessed which resident’s record.
In healthcare, IT failures don’t just cost money. They delay care, and they end up in an inspection report.
Healthcare and care providers are actively targeted, partly because the data is valuable and partly because the pressure to restore service quickly is so high. The routes in are the ordinary ones: an account without multi-factor authentication, a shared password, a device that isn’t encrypted, a backup nobody has tested.
The regulatory consequence compounds it. An incident involving resident or patient data is reportable, it’s a governance question at your next inspection, and it will be asked about by commissioners and insurers.
The technical work behind both problems is the same work. Individual accounts for every member of staff, multi-factor authentication, access that matches roles, encrypted devices, coverage where care happens, and tested backup. Document it as you go and the evidence for CQC or the toolkit already exists rather than being assembled in a panic.
Individual logins, enforced multi-factor authentication, access controls that match roles rather than convenience, encryption, and tested backup. Plus the audit trail that lets you show who accessed what, which is the part most providers can’t currently produce.
Wifi designed for the building you’ve got, including the old parts, the extension and the upstairs rooms, so electronic care records work at the bedside rather than back at the office.
We document the technical controls as we implement them, so when inspection or the annual submission comes round, the systems side of the evidence already exists in a form you can use.
Two minutes, a handful of questions, covering the ground CQC and the toolkit ask about. Useful whether or not you ever speak to us.
You hold special category health data, you’re inspected on how you protect it, and many providers have an annual security submission to make. Professional gives you the strongest security stack we offer plus Cyber Essentials tools and certification support, and Cyber Essentials sits neatly alongside the questions CQC, the toolkit and commissioners ask, so the same work serves all three.
For a small clinic or single practitioner, Essential covers complete cloud and email security, real Microsoft 365 backup, device security and your Microsoft 365 Business Premium licence. A sound position, and easy to step up from.
If you run a care home or several, the building and its wifi is usually a separate piece of work, and it’s the one that makes the most practical difference day to day. We’d want to walk the building before saying anything definite about it.
The Professional IT Support Service is for businesses that want the best — complete IT support, the strongest security we offer, and Cyber Essentials tools and certification support all in one package. If you need to protect your reputation, meet compliance requirements, and have confidence your IT is in safe hands, this is it.
Key Features
Every package is unlimited support with no ticket caps and no per-incident charges. Rolling monthly terms are available, longer terms carry a discount, and not-for-profit pricing applies across the range. Current prices are on the package pages.
Shared logins break your audit trail completely. If you’re ever asked who accessed a resident’s record, you need to be able to answer, and that matters more here than almost anywhere.
Free, quick, and the first thing an insurer or an assessor asks about.
Agency and bank staff come and go constantly. Access should end when the placement does.
Phones and tablets used by community and domiciliary staff carry personal data into cars, homes and public places. Encryption and remote wipe turn a lost device into a replacement rather than a reportable breach.
If staff can’t reach the care record where the resident is, the record stops being contemporaneous and the system stops being worth having.
Covering your care planning or clinical system and your office files. Most providers have never tried.
This is the part that stops most people, and it’s usually smaller than imagined.
What you run, what staff use where, how records are accessed, what’s backed up, and where coverage falls over. About an hour, no obligation, findings in writing.
Individual accounts, multi-factor authentication, device encryption and the leaver process, in that order.
Wifi designed for your actual building rather than a floor plan, so digital records work where care happens.
Unlimited support Monday to Friday, 9am to 5pm, monitoring and patching through the week, with the technical evidence for inspection maintained as we go.
Questions healthcare and care providers ask us
Not as standard, and we’d rather say so plainly. Our support runs Monday to Friday, 9am to 5pm, unless you arrange out of hours cover with us separately.
What we do instead is make the overnight hours as uneventful as possible: systems monitored and patched during the week, maintenance planned around your routines, and a short written procedure your night staff can follow for the handful of things that actually go wrong. Care records should also be reachable in a way that doesn’t depend on anything fragile. If after that you want out of hours cover, it can be arranged, and we’ll give you an honest view of whether you need it.
We can help with the technical side, which is most of what it asks about: how systems are protected, how access is controlled, what’s backed up, how devices are managed. We document those as we go so the evidence exists when you need it. The care and organisational sections stay with you. It’s also worth knowing that free support with the toolkit has been available to care providers through national programmes, and we’d point you at that rather than charge you for it.
The information governance questions that touch on systems, access, backup and security are ones we can evidence directly. Providers who have this documented in advance find that part of an assessment considerably less stressful.
We support everything it runs on: devices, connectivity, coverage, access and backups. We work alongside your system provider’s own support rather than replacing it, so you aren’t refereeing between two suppliers while staff are trying to record care.
Partly, and we’d be straight about where. Your core clinical system and much of your frontline IT come through NHS arrangements rather than being something a practice buys on the open market. Where we can help is the things that sit outside that: your business side, additional devices, private work, connectivity, and security questions nobody else is owning. We’d rather tell you that at the first meeting than discover it at the third.
A manageable one. Managed, encrypted devices that can be wiped remotely, with the same access rules wherever someone is working. Community staff lose devices, it’s simply a fact of the job, and the point is making that a replacement cost rather than an incident.
Very common, especially in older or extended buildings, and it undermines digital care records completely. It needs a survey rather than another extender, and it’s usually one of the more satisfying things to fix because staff feel the difference immediately.
We don’t work to fixed SLA response times. Within our working hours we work on priority, so something stopping staff from delivering or recording care is dealt with ahead of something trivial.
No. You can take any package on a rolling monthly term. Longer terms carry a discount, and the current rates are on each package page, but that’s your choice, not a condition.
We look after clinics, care providers and healthcare businesses across Bristol, Bath, Cheltenham, Gloucester, Somerset and Swindon, with remote support anywhere in the UK. We’re an NCSC Assured Service Provider, Cyber Essentials Plus certified, and ISO 9001 and ISO 27001 accredited, so the standards we ask you to meet are ones we’re audited against ourselves.
Start with an hour and a walk round. You’ll come away knowing what an assessor would find, where your coverage falls over, and what would actually happen on a bad day.
There is nothing more annoying than an IT glitch that stops you working efficiently. However, knowing you have access to immediate attention to the glitch and a solution to it, is very reassuring and that is provided by We Do Your IT. We have so appreciated the availability and response given by the team at We Do Your IT, enabling us to remain a productive firm.
Richard Sharp – Sharp Family Law