Home

What is ESR?

System security

System security

The ESR contract and associated schedules between the NHS ESR Project Team and McKesson stipulate a number of requirements relating to security of the total service. These describe processes and policies to maintain security of the system and data, alongside procedures that will be undertaken in the event of security breaches or potential breaches. McKesson are registered with the Information Commissioner for the purposes of Data Protection and will comply with ISO/IEC 27001 Security Standard controls and will undertake independent audits in order to extend and maintain ISO/IEC 27001 certification throughout the project.