What Do They Know

I would like to submit a request for a disclosure of information relating to your NHS trust’s Information Technology IT. Spend, and your current HIMSS EMRAM and INFRAM scores.

Can you please provide your trust’s IT spend for the following financial years:
FY 2021-2022:
FY 2022-2023:

Which HIMSS EMRAM score have your Trust currently achieved 0-7.:
Which HIMSS INFRAM score have your Trust currently achieved 0-7.:
If your Trust are working towards achieving a new HIMSS EMRAM or INFRAM level, what level is this, and when will it be achieved:

Definitions:
Electronic Medical Record Adoption Model EMRAM. – is an eight-stage model, scored from stages zero least mature. to seven most mature.. At each stage, organisations need to demonstrate a progressive and eventual removal of paper, higher pervasiveness of use and compliance statistics, and an increasing reliance on automation and clinical decision support.
Infrastructure Adoption Model INFRAM. – The eight-stage INFRAM measures the maturity of a healthcare facility’s IT infrastructure across five areas: mobility, security, collaboration, transport and data centre.

For each year 2020 – 2022., please confirm how many cyberattacks your Trust has suffered?

For each year 2020 – 2022., please confirm how many cyberattacks have resulted in the halting of or delay in delivery of care or services to patients?

For each year 2020-2022., please confirm:

The GBP £. value of budget allocated to cybersecurity

What percentage of the Trust’s entire budget for the financial year was spent on cybersecurity?

How many times in the last 12 months have you audited your third-party suppliers’ cybersecurity measures?

I am writing to make a Freedom of Information FOI. request to obtain information regarding the Management of Permits to work PTW. on your sites. Could you kindly provide details on the following:

a. Which types of work require a Permit To Work to be completed on your sites?

b. Does your organisation utilise a software platform to issue, record, and provide evidence of completed works that require a permit?

c. If a software platform is used, please specify the name or type of software utilised to complete and evidence work permits.

d. Who within your organisation is responsible for the issuance, sign-off, and provision of evidence for Permits To Work?

a. Who is responsible for your cleaning audit surveys?
b. Can you outline how cleaning audit surveys are completed?
c. What software, if any, is used to complete and report on cleaning surveys?
d. If you use software to complete cleaning audits, what was the original contract start and
end date?
e. If you use software to complete cleaning audits, what was the contract cost per year?
f. If you use software to complete cleaning audits, how was this procured Direct
award/tender etc..

O365 Licencing Questions:-

a.- Which Microsoft O365 do you use eg E3,E5?
b.- Do you use the NHS-shared O365 tenant?
c.- Do you procure O365 licences through Microsoft Enterprise Agreement EA. or Cloud Service Provider CSP.. Who is your supplier?
d.- When is your licencing renewal date/anniversary for these services?

Microsoft Telephony Questions

e.- Do you have Microsoft Calling Plans, if so how many licences users.
f.- Do you have other forms of Microsoft Telephony such as Direct routing/Operator connect? How many licences users. and which supplier?
g.- When is your licencing renewal date/anniversary for these services?

Thank you for your FOI request.

We do not have a patient portal/PEP and is not on our current pipeline to procure a patient portal / patient engagement platform PEP..

I’d be grateful if you could please confirm the adoption of a full Electronic Patient Record EPR. solution and Medical Device Integration MDI. solution across your NHS Trust by kindly providing a response to the following information request:
Please Note: Definitions of each solution type are provided at the bottom of this request.
***** EPR – Information Request *****
Current EPR Supplier Name?
System Name?
Contract Commencement Date?
Contract Expiration Date?
If no EPR is installed, can you please confirm the following:
Does your NHS Trust currently adopt a Patient Administration System PAS.?
If Yes, can you please confirm the NHS Trusts current PAS Supplier?
Does your NHS Trust have any plans to introduce a full EPR solution in the next two years?
***** MDI – Information Request *****
Does your NHS Trust currently adopt a Medical Device Integration solution across the Trusts ICU and Theatre departments to facilitate the exchange of data between Medical Devices Patient Monitors, Ventilators etc.. and Patient Information Systems such as an EPR, PAS or other Clinical Information Systems CIS.?
If so, can you please provide the following information:
Current MDI Supplier Name?
System Name?
Contract Commencement Date?
Contract Expiration Date?
If no MDI solution is installed, can you please confirm the following:
Does your NHS Trust have any plans to introduce an MDI solution in the next two years?

***** System Definitions *****
EPR – An electronic patient/health record is a digital version of a patient’s paper chart.
MDI – Medical Device Integration refers to the interoperable linking of medical bedside devices such as Patient Monitors, Ventilators etc.. to clinical information systems such as an EPR. to facilitate automated exchange of data between the systems, removing manual paper driven processes.
PAS – Core enterprise systems, containing a Master Patient Index. Typically used by NHS Trusts to document the patient journey e.g. patient arrival tracking, patient identification, clinician who managed the appointment, the treatment the patient received, diagnosis and next steps. This core functionality, required by every NHS Trust typically covers admission, discharge and transfer.

CIS – Is a general name given to any system which collects and stores patient data. These systems may be deployed at department level, hospital level or indeed across entire healthcare systems.

I would like to request the following information
1. Does your Trust currently use Oxehealth/Oxevision or any other video
surveillance or technology enabled vital signs monitoring within patient residences including seclusion suites, patient bedrooms etc..
2. Where within patient residencies is this technology located eg. Seclusion rooms, patient bedrooms, patient bathrooms.
4. Copies of patient leaflets or information sheets related to Oxehealth/Oxevision or any other video surveillance or technology enabled
vital signs monitoring.
5. Your organisation’s Equality Impact Assessments in relation to Oxehealth/Oxevision or any other video surveillance or technology enabled vital signs monitoring.
6. Your organisation’s risk assessment in relation Oxehealth/Oxevision or any
other video surveillance or technology enabled vital signs monitoring.
7. Your organisation’s operational and organisational policies and procedures
relating to Oxehealth/Oxevision or any other video surveillance or technology enabled vital signs monitoring, including details of patient consent.
8. Details of which services have the ability to use Oxehealth/Oxevision or any
other video surveillance or technology enabled vital signs monitoring. ie.
Secure Services, Psychiatric Intensive Care Services, CAMHS etc..
9. Details about the decision-making process relating to adopting
Oxehealth/Oxevision or any other video surveillance or technology enabled vital signs monitoring.
10. Records of any training provided in using this technology.
11. Details of where footage / information is stored
12. Any Data Protection Impact Assessments for Oxehealth/Oxevision or any
other video surveillance or technology enabled vital signs monitoring.

Would you be kind enough to let me know the answers to the following questions?

Which Helpdesk tool does the IT department use for managing tickets?
When was the tool purchased?
When is the existing contract due to end?
When does the trust intend to review the solution with a view to potential replacement?
Can you please let me know who is responsible for this solution?

Which software does the IT department use for performance monitoring of servers and infrastructure?
When was the tool purchased?
When is the existing contract due to end?
When does the trust intend to review the solution with a view to potential replacement?
Can you please let me know who is responsible for this solution?

Which endpoint management tool does the IT department use for managing computers/laptops/mobile devices/servers etc?
When was the tool purchased?
When is the existing contract due to end?
When does the trust intend to review the solution with a view to potential replacement?
Can you please let me know who is responsible for this solution?

Does the Trust have any solution in place to help with the management of power useage within the PC estate?
Which tool is in use?
When was the tool purchased?
When is the existing contract due to end?
When does the trust intend to review the solution with a view to potential replacement?
Can you please let me know who is responsible for this solution?

Lastly, as this is a matter of public record and is attainable in your spend reports, can you please confirm roughly how much each of the above solutions cost?