My Lords, the design goals for the NHS app should be to make it as easy and frictionless as possible for legitimate users to access the system, while making it as difficult and frictionful as possible for people trying to gain unauthorised access. But there is a natural tendency to focus on the first part of this equation as developers believe in the systems they build and find it hard to put themselves in the shoes of the cunning and resourceful attackers who will try to break them. Given this dynamic, can the Minister confirm that the NHS has a red team tasked with trying to identify all possible vectors of attack on the NHS app, and that the requisite resources will be put into mitigating any risks that they identify?

My Lords, the design goals for the NHS app should be to make it as easy and frictionless as possible for legitimate users to access the system, while making it as difficult and frictionful as possible for people trying to gain unauthorised access. But there is a natural tendency to focus on the first part of this equation as developers believe in the systems they build and find it hard to put themselves in the shoes of the cunning and resourceful attackers who will try to break them. Given this dynamic, can the Minister confirm that the NHS has a red team tasked with trying to identify all possible vectors of attack on the NHS app, and that the requisite resources will be put into mitigating any risks that they identify?

To ask His Majesty’s Government what measures they have put in place to mitigate the risk of people being coerced into showing their confidential medical records to third parties as records become universally available through the NHS app.

To ask His Majesty’s Government what measures they have put in place to mitigate the risk of people being coerced into showing their confidential medical records to third parties as records become universally available through the NHS app.

To ask the Secretary of State for Health, how many hospital trusts in each cluster area have been supplied with picture archiving and communications systems. - Includes no figures.

To ask the Secretary of State for Health, how many hospital trusts in each cluster area have been supplied with picture archiving and communications systems. - Includes no figures.

To ask the Secretary of State for Defence, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for Defence, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Deputy Prime Minister, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department. - Inc ref to 417 c359W, 28 January 2004. (Printed on 23.02.2004 in Bound Volume 418 c330W).

To ask the Deputy Prime Minister, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department. - Inc ref to 417 c359W, 28 January 2004. (Printed on 23.02.2004 in Bound Volume 418 c330W).

To ask the Deputy Prime Minister, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department. - Inc ref to 417 c359W, 28 January 2004. (Printed on 08.03.2004 in Daily Part 418 c1223W).

To ask the Deputy Prime Minister, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department. - Inc ref to 417 c359W, 28 January 2004. (Printed on 08.03.2004 in Daily Part 418 c1223W).

To ask the Secretary of State for Work and Pensions, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department. - Inc ref to NAO report "Purchasing and Managing Software Licences".

To ask the Secretary of State for Work and Pensions, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department. - Inc ref to NAO report "Purchasing and Managing Software Licences".

To ask the Minister for the Cabinet Office, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Minister for the Cabinet Office, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for the Home Department, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for the Home Department, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for Trade and Industry, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in her Department.

To ask the Secretary of State for Trade and Industry, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in her Department.

To ask the Secretary of State for Education and Skills, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for Education and Skills, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for Environment, Food and Rural Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.

To ask the Secretary of State for Environment, Food and Rural Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.

To ask the Secretary of State for International Development, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.

To ask the Secretary of State for International Development, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.

To ask the Secretary of State for Transport, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.

To ask the Secretary of State for Transport, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.

To ask the Secretary of State for Foreign and Commonwealth Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for Foreign and Commonwealth Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask Mr Chancellor of the Exchequer, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask Mr Chancellor of the Exchequer, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.

To ask the Secretary of State for Culture, Media and Sport, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.

To ask the Secretary of State for Culture, Media and Sport, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.

To ask the Secretary of State for Trade and Industry, what assessment she has made of the proposed directive on the patentability of computer-implemented inventions as approved by the European Parliament on 24th September; and if she will make a statement. - (Holding answer 3 November 2003).

To ask the Secretary of State for Trade and Industry, what assessment she has made of the proposed directive on the patentability of computer-implemented inventions as approved by the European Parliament on 24th September; and if she will make a statement. - (Holding answer 3 November 2003).

To ask the Secretary of State for the Home Department, what estimates for staff reductions were included in the business case for the new computer system at the Immigration and Nationality Directorate; and what revisions have been made to take account of the delays in the programme for installation. -...

To ask the Secretary of State for the Home Department, what estimates for staff reductions were included in the business case for the new computer system at the Immigration and Nationality Directorate; and what revisions have been made to take account of the delays in the programme for installation. -...