ICT for Recovery

Norfolk & Norwich University NHS recognise benefits of user access control

Implementing Single Sign-On software from Imprivata, Enline will initially roll out OneSign, an appliance based authentication and access management solution, across the hospital's busy A&E department, which will allow full auditability of Norfolk and Norwich's users, increasing data assurance and protection. The system will also integrate with the existing Connecting for Health (CfH) smartcard technology, allowing users to sign on to all applications using one smartcard and pin number, improving clinical efficiency, security and accountability.

Typically NNUH staff are required to remember multiple usernames and passwords to access the Trusts' multiple applications. The need to remember numerous passwords places additional burden on staff, creating frustration over long log in times and impacting upon productivity. This also impacts upon the Trust's IT activity, with the majority of the IT helpdesk's support time currently being allocated to answering password related helpdesk calls.

As password management is a key challenge for the Trust, the IT department began looking at single sign-on solutions capable of addressing these challenges. In this search, secure access to data and user management were key factors. NNUH examined a number of solutions before selecting Imprivata OneSign.

With OneSign, NNUH will be able to monitor, capture and log password-related user events for all of the Trust's SSO enabled users in a centralised audit log. OneSign will allow administrators to monitor access records for every user, application or workstation in one central location. In short they will know who has access to what data, and when.

Bill Fisher, Head of IT, from Norfolk and Norwich NHS Trust explains: 'We take our responsibility for safeguarding patient information very seriously and feel that Enline's use of a proven product within the NHS and their extensive experience, will enhance our existing data security policies and make password management more secure throughout the Trust. Enline's implementation of OneSign will allow us to have clear and straightforward security policies across all of our applications and will even give us the flexibility to tailor stronger passwords to applications that contain sensitive data.'

He added, 'Although secure password and user management were key factors in our selection of OneSign, we also recognise the range of other benefits that the system will bring, most notably delivering efficiency savings through a reduction in downtime caused by users being locked out of their computers, providing faster access to patient information – something which is vital in an A&E department - and reducing the calls to our IT helpdesk.'

Last year, NNUH treated more than 75,000 people in its A&E department, making the ability to access patient records quickly and easily of vital importance to the Trust's effective operation. In the past this has increased the temptation for other staff to remain logged in to allow other colleagues to gain faster access to applications without being forced to wait during long log in and logout times when changing users on workstations. OneSign will remove waiting times and allow each team member quicker access to all applications through their own individual password.

Related links to this article:
Norfolk and Norwich University Hospital NHS Trust