NHS trust takes on USB security
Following a USB stick amnesty, Lancashire Care Trust has rolled out a secure system to help prevent data breaches.


Lancashire Care NHS Trust has today revealed the steps it has taken to safeguard access to sensitive data transferred and stored on USB devices.
New central security management software and sanctioned USB keys will enable the trust to make sure it can minimise the possibility of a data breach and protect the systems used by its 3,500 staff, who provide mental health and substance misuse services to 1.4 million people across Lancashire.
The trust is using the Sanctuary Data Protection system provided by Lumension Security to protect USB ports by assigning user access rights, blocking any unauthorised attempts to download data and encrypting all downloaded data.
A directive to ensure that all USB memory sticks holding the trust's data were encrypted led Lancashire's data security officer Alan Boardman to hold an amnesty to collect all USB sticks that had previously been used on the network.
The new software was then rolled out and staff were issued with an officially sanctioned USB memory stick for storing and transporting work data, allowing the IT security team to create a whitelist' of approved devices that are allowed to connect to the network - as well as block unauthorised ones.
Boardman said: "We were specifically looking for a centralised data protection solution that automatically enforced encryption. We can drill down into the access permissions of a particular device model, serial number or named employee, and have complete control over movement of data to and from all USB devices."
The new system also offers the ability to assign read/write access per individual user for each officially sanctioned USB device that connects to the network, as well as shadow and log all usage of USB memory sticks for auditing and compliance purposes.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"The trust's directive has been fulfilled and we now have the guarantee that all data stored on USB devices is encrypted and cannot be accessed if a thumb drive is lost or stolen," Boardman added.
In addition, the trust is applying the whitelisting capabilities of its new security system to other removable storage devices, including digital cameras, dictation devices and printers. And it is also now used to disable write access to floppy disks and CD/DVDs across the trust, allowing data to be read from these media but not written to them.
The NHS IT group Connecting for Health is currently rolling out encryption from McAfee - read more about it here.
A 25-year veteran enterprise technology expert, Miya Knights applies her deep understanding of technology gained through her journalism career to both her role as a consultant and as director at Retail Technology Magazine, which she helped shape over the past 17 years. Miya was educated at Oxford University, earning a master’s degree in English.
Her role as a journalist has seen her write for many of the leading technology publishers in the UK such as ITPro, TechWeekEurope, CIO UK, Computer Weekly, and also a number of national newspapers including The Times, Independent, and Financial Times.
-
Putting small language models under the microscope
ITPro Podcast The benefits of small language models are undeniable – but they're no silver bullet
By Rory Bathgate
-
CyberOne appoints Microsoft’s Tracey Pretorius to its advisory board
News The threat intelligence leader will provide strategic guidance to CyberOne’s executive team
By Daniel Todd
-
NHS supplier hit with £3m fine for security failings that led to attack
News Advanced Computer Software Group lacked MFA, comprehensive vulnerability scanning and proper patch management
By Emma Woollacott
-
Cyber attack delayed cancer treatment at NHS hospital
News A cyber attack at Wirral University Teaching Hospital in 2024 delayed critical cancer treatment for patients, documents show.
By Nicole Kobie
-
Alder Hey Children’s Hospital confirms hackers gained access to patient data through digital gateway service
News Europe’s busiest children’s hospital confirmed attackers were able to steal data from a compromised digital gateway service
By Solomon Klappholz
-
Major incident declared as Merseyside hospitals hit by cyber attack
News The incident, which has led to cancelled appointments, is just the latest in a series of attacks on healthcare organizations
By Emma Woollacott
-
Thousands of procedures canceled at London hospitals as Qilin releases blood test data
News The attack on blood testing company Synnovis continues to affect patients, while the ransomware group follows through with its threats
By Emma Woollacott
-
Ransomware group threatens to publish 3TB of stolen NHS Scotland data after posting proof of attack
News NHS Dumfries and Galloway has confirmed some of the sensitive data stolen during the 15 March attack has been published by a known ransomware operator
By Solomon Klappholz
-
Attack on third-party software vendor disrupts NHS ambulance services
News The ambulance services serve more than 10 million people across the south of England
By Ross Kelly
-
NHS data leak raises ‘serious questions’ about Manchester University cyber attack
News NHS patient data used for research purposes is believed to have been compromised in the June attack
By Ross Kelly