0019 20191127 – HSCN Obligations -Technical and Security Obligations

Thursday, 28, November 2019 | HSCN Change Control

Change Control Notice

00016_20170917 to 00025_20191127 HSCN Compliance CR Form

Change Reference:  – 0019 20191127

Title:  – HSCN Obligations -Technical and Security Obligations

Change to:- Obligations Framework 4.3.3 – S09b

Dialogue: – Replace the following text (column E):

In the event of the unavailability of the ANM, the HSCN Supplier shall route traffic directly to the Internet, for example via policy routing. This is an option that can be invoked by the HSCN Authority. This would only be invoked in the event of a loss of the entire ANM or NHS Secure Boundary Service. The HSCN Supplier will complete this activity within 4 hours of formal notification by the HSCN Authority.

With the following (differences highlighted in bold):

In the event of the unavailability of the ANM or NHS Secure Boundary Service, the HSCN Supplier shall route traffic directly to the Internet, for example via policy routing. This is an option that can be invoked by the HSCN Authority. This would only be invoked in the event of a loss of the entire ANM or NHS Secure Boundary Service. The HSCN Supplier will complete this activity within 4 hours of formal notification by the HSCN Authority.

The Advanced Network Monitoring (ANM) service contract is due to reach the end of its term in May 2020.

NHS Secure Boundary has been procured as a strategic solution across NHS Digital services.

In order to facilitate service continuity, and an orderly cutover and exit, HSCN Suppliers must connect and cutover their traffic from the ANM service to NHS Secure Boundary between December 2019 and 31 March 2020.

HSCN Suppliers will be supported in this activity by the NHS Secure Boundary supplier and NHS Digital.

An initial supplier briefing was held on 08 October 2019 and this will be following up with 121 sessions with each HSCN supplier.

Change reason – To mitigate a (potential) risk or (current) issue

Change Level – Major. 

Comments due back on 27th December 2019. No comment is assumed to be acceptance.

Comments

  1. A commercial review of the proposed changes is required.
    1. Please can some more information around this comment be provided. NHS Digital don’t believe that the move to Secure Boundary from ANM means any change to the commercial model.

The following CN-SPs are consulted

  1. Convergence (Group Networks) Limited
  2. MLL Telecom Limited
  3. Redcentric Solutions Limited
  4. AdEPT Telecom PLC
  5. British Telecommunications PLC
  6. Piksel Limited (Carelink)
  7. Daisy Communications Limited
  8. Exponential-e Limited
  9. IT Professional Services Limited
  10. KCOM Group Public Limited Company
  11. CenturyLink Communications UK Limited
  12. Node 4 Limited
  13. NYNET Limited
  14. OCSL Managed Services Limited
  15. Updata Infrastructure (UK) Limited
  16. The Networking People (Northwest Ltd)
  17. Virgin Media Business Limited
  18. UKFast.net Limited
  19. Gamma Telecom
  20. GTT
  21. High Speed Office
  22. Intercity Technology Ltd
  23. IQVIA Solutions UK Ltd
  24. Logicalis
  25. Telefonica UK Limited
  26. Vodafone
  27. CANCOM UK Managed Services