Health & Social Care Network
Innopsis Workshop
Meeting Agenda
Introduction
HSCN The need for change and NHS Digital Objectives
HSCN Operating Model
Questions for NHS Digital (chaired by Michael Bowyer)
Coffee Break.
HSCN Obligations Framework and Deed and why its important for members
HSCN Compliance
Commercial Model and planned procurement activity
Break (Pause for Breath)
Service Obligations
Programme Review key milestone dates
Open forum for Innopsis Questions / Feedback on Innopsis Management
Meeting Ends Lunch
2
HSCN for innopsis members
“HSCN presents a unique opportunity to drive supplier Innovation,
Collaboration, Disaggregation, Improved service across the NHS
and the connected wider community. INNOPSIS has worked with
NHS Digital to create the Obligations Framework the foundation of
HSCN which supports circa 35,000 connections across England and
Wales creating the largest public sector network infrastructure in the
UK”
3
The need for change
Dermot Ryan – HSCN Programme Director
4
HSCN and the need for change
N3 contract ceasing
The requirements for information access and sharing have changed
• Underlying networking arrangements needed to support an
affordable, agile and integrated health and social care sector
need to change as well
NHS Digital is now intending to:
• Provision successor services
• Manage the exit from the existing N3 contract
• Support the migration of N3 customers to HSCN
5
N3 to HSCN
N3
• Designed to enable NHS organisations to access national applications
• National private network
• Single supplier
• Long-length contract arrangement
HSCN
•Designed to support Paperless 2020 and the Five Year Forward View
•Standards-based approach that will:
•Enable interoperability between Health and Care organisations
•Support regional collaboration
•Create a competitive marketplace
•Support flexible and remote working patterns
•Make better use of existing infrastructure and services
6
Vision
• HSCN will provide a reliable, efficient and flexible way for
health and care organisations to access and exchange
electronic information
– By reducing cost and complexity, standardising networks,
enabling service sharing and extending the parameters of
collaborative working, it will save money, enable information to
be reliably shared and help staff work together in more effective
and efficient ways
– The HSCN proposition aims to support a world where anyone
involved in the delivery of health and social care services can
access the information and services they need to do their job
from any location at any time and without the need for complex,
bespoke and expensive ICT arrangements
7
Objectives
•
Create the means for improved and affordable connectivity and information sharing between a wide
range of organisations involved in the delivery of health and social care services
•
Provide network and connectivity arrangements (standards and architecture) capable of supporting
interoperability and meeting the emerging requirements of health and social care professionals who
increasingly work flexibly from a variety of locations, using a range of methods of access
•
Create a competitive marketplace for interoperable and cost effective network services
•
Provide a network that enables more widespread adoption of mobile technology, online
collaboration solutions and extending access to existing online systems to Social Care and nonNHS care providers.
•
Support Regional collaboration
•
Support the delivery of end to end, high quality care, by providing reliable and ubiquitous online
access to patient records, data, images and diagnostic tools
•
Seek to reuse and exploit extant public sector infrastructure and capability in support of the above
where it makes strategic or economic sense to do so.
•
Deliver a controlled and stable transition from current N3 services to successor services and the
target architecture
8
What next
Collaboration has yielded much benefit and positioned
us all well for the HSCN migration so what next?
• Confirmation of your intentions for HSCN
• Work with us in optimising the scope of the
collaborative procurements
• Recognise the opportunity and invest in the pilot and
early adopters
• Make sure that the services work from day 1
• Support for remote geographies
9
HSCN Operating Model and Network Design
Nick Schlanker – HSCN Head of Solution
10
HSCN Operating Model
Network Design Overview
Transition Network
• N3 contract planned to cease 31 March 2017
• TN (previously known as Legacy Backbone) required from 1 April
2017 to provide continuity of critical services until c. 14,000 circuits
are migrated to HSCN
• Linked into the HSCN Peering Network Service to enable
connectivity with CN-SPs’ networks and new HSCN services
• New run-down contract with incumbent supplier (BT) for minimum
scope:
– Core network
– Technology services: NTP, DNS, IPAM
– Transitional assistance to enable migration including information
relating to the legacy N3 service contracts between BT and customers
Peering Network Service
• Strategic connectivity points where all HCSN traffic that
needs to pass between CN-SPs and/or TN routed and
access to national health applications
– Two geographical separated Carrier Neutral Facilities (CNF)
– All CN-SPs will connect to both CNFs
– Highly available solution, with uncontended interconnects
between CN-SP networks
– Managing the onboarding of CN-SPs to PN
– Specific HSCN service and security requirements
14
Advanced Network Monitoring Service
• Protect the wider Health & Social Care Service by analysing
organisation level internet traffic
• HSCN traffic destined for the internet will be routed from the
CN-SP Internet gateway to the ANM service
• Cloud hosted service expected
• Key capabilities:
– URL Blocking, IWF lists and HSCN provided site blocking
– Inline Anti-Virus & Anti-Spyware. Signature based anti-malware
scanning and inbound/outbound file inspection
– APT Protection – Standard Behavioural Analysis. Protect against
zero-day threats and vulnerabilities in suspicious files
– Reporting mechanism
15
Network Analytics Service
• NHS Digital capability to proactively monitor the HSCN to look for
malicious, anomalous or otherwise suspicious traffic
• Ensuring service availability is not diminished by cyber threats
• NAS Partner:
– Design and build the infrastructure and tooling necessary to collate
and report on HSCN network activity
– Analyse centrally collected IPFix data from HSCN consumer traffic
– Work closely with and support the NHSD Digital Security Team in
understanding cyber threats to HSCN and the wider Health and Social
care system
– Agile working to address the ever changing nature of threats to HSCN
– Upskill NHS Digital staff
16
Questions for NHS Digital
17
HSCN Obligations Framework & Deed
Michael Bowyer
18
HSCN Obligations Framework
The Obligations Framework provides a well developed and articulated operating model for suppliers
and users of HSCN and enables;
•
•
•
•
•
•
•
•
Disaggregation
Network Performance Standards
Choice of connectivity solutions
An end to end service model guaranteeing performance
Competitive market
Adherence to NHS Digital IA requirements
A transition model
Deed of Undertaking
19
HSCN Client Aspects
HSCN was developed in cooperation between NHS Digital and Supplier Community and creates;
•
•
•
•
•
•
•
The logical default network for users
Supports new UK based supplier entrants
Offers a safe and secure transition capability
Will meet all user type requirements
Creates an agreed and understood service model
Will use established Frameworks & Aggregated Procurements
The user is the client HSCN is the operating model
20
HSCN Compliance
Des Ward
21
HSCN Obligations Framework
•
•
•
•
Underpinned by CAS(T)
Existing certifications taken into account
Designed to allow entry to new suppliers
Tiered approach to compliance
22
Why CAS(T)?
•
•
•
•
•
Derived from N3
High availably assurance
Security and Service assurance integrated
HMG standard for Telcos
Formal change process for customers and suppliers
23
Do I need CAS(T) certification?
•
•
•
•
CAS(T) critical controls mandatory for all suppliers
Governance requirements from CAS(T)
ITHC mandatory for all suppliers
Tiered approach agreed
24
What is the tiered approach?
• Asserted – critical controls, governance controls and ITHC
• Audited – ISMS with critical and mandatory controls and
ITHC
• Accredited – CAS(T) certification
Asserted suppliers must achieve audited or accredited within
two years of signing first contract
25
What do I need to do?
•
•
•
•
Scope services according to scoping guidance
Implement critical controls
Implement mandatory governance controls
Undertake ITHC on scope of services (according to Gov.uk
guidance)
• Complete compliance process (coming soon)
26
How can we help?
• Supplier compliance workshops will be held Q4/16 and
Q1/17 in North/South of England
• Guidance spreadsheet available
27
Commercial Model & Planned Procurement Activity
Michael Bowyer
28
HSCN Contracting Model: Transition State
Transition
state only
Contract
HSCN
Consumer
Contract may not be
specific to HSCN
Other relationship
Inc. Mandatory Supplemental Terms
CNFs
Connection
Agreement
Consumer Network
Service Provider
Peering Network
Service Provider
Transition Network
Service Provider
NTP
Advanced Network
Monitoring
Service Provider
Implement
Deed
Certify
Network Analytics
Service Partner
HSCN
Obligations
Framework
Authority
MOU
HSCN
Marketplace
(CCS)
DNS IPAM
Technology Services
29
HSCN Contracting Model: End State
Transition
state only
Contract
HSCN
Consumer
Contract may not be
specific to HSCN
Other relationship
Inc. Mandatory Supplemental Terms
CNFs
Connection
Agreement
Consumer Network
Service Provider
Peering Network
Service Provider
Implement
Deed
Certify
Transition Network
Service Provider
NTP
DNS IPAM
Technology Services
Advanced Network
Monitoring
Service Provider
Network Analytics
Service Partner
HSCN
Obligations
Framework
Authority
MOU
Sourcing TBD
as pan-Gov’t
strategy emerges
HSCN
Marketplace
(CCS)
30
Transition Network Service
• Route: Non-competed award to BT
• Term: 2 (+1+1) years: minimised, allowing for migration
challenge
• Key commercials:
Minimum scope and minimum term ramp-down contract:
– Connections and PoP reduction
– Ability to transfer out Technology Services during term
– No new access connectivity business
NHS Digital is working with BT to finalise and enter approvals early
Oct
Service commencement 1 April 2017
31
Peering Network Service
Market engagement submissions received.
• Route: Open OJEU
• Term and estimated value: 4 year framework, initial 3 year call-off.
Value TBC
• Key commercials:
PN-SP revenue certainty – independent of HSCN ramp-up
– Set-up charges paid by Authority
– Operational charges paid by Authority – invoice value reduced by total value
of invoices from PN-SP to CN-SPs
CN-SP equitable cost clarity established in framework
– PN-SP to CN-SP pricing (& scalable by data traffic volume)
– CNF pricing for router space (if required)
Indicative
Dates
Pre-proc
To 22 Sept
Notice
(start)
Early Oct
Tenders in
Nov
Pref. Bidder
announced
Dec
Contract
Award
Jan/Feb
Service
Go-Live
32
Apr/May
Advanced Network Monitoring Service
Market engagement submissions received
• Route: TBC
• Term and estimated value: 3(+1) years £TBC
• Key commercials:
– Go-Live milestone payment?
– Tiered service pricing?
Indicative
Dates
Pre-proc
Aug/Sep
Notice
(start)
Sep
Tenders in
Oct
Pref. Bidder
announced
Dec
Contract
Award
Jan/Feb
Service
Go-Live
Jul 33
Network Analytics Service Partner
Partner’s service related to design, build & operate in-house
NAS capability
• Route: CCS framework RM1058, Lot 4 with qualification
phase
• Term and estimated value: 2 years (+ up to 2 further
years) ≈£8m for 4 years inc. s/w, h/w & hosting
• Key Commercials:
–
–
–
–
Indicative
Dates
Tender will include design with s/w & h/w specs and prices
TCO evaluated – option to buy s/w & h/w later
Milestone payments: Detailed Design & Go-Live
Service payments (fixed price)
Pre-proc
-
Notice
(start)
Sep
Tenders in
Oct
Pref. Bidder
announced
Dec
Contract
Award
Jan/Feb
NAS Service
Go-Live
Jul34
Access Connectivity
Consumers responsible for procuring HSCN services. HSCN
programme will support/facilitate:
• Collaborative Self Serve – ‘do it with you’
– Active programme support
– Deliver improved collaboration and integration of health and social
care organisations
• Aggregated procurement – ‘do it for you’
– Programme and CCS run regional procurements process using CCS
framework RM1045 to maximise benefits
• Individual Self Serve – ‘enable you to do it’
– Programme and CCS create tools, processes
– RM1045 suppliers’ catalogues
35
Short Break
36
HSCN Service Obligations
Michael Bowyer
37
HSCN Service Obligations
Obligation Framework Service Management Obligations are detailed in two important
documents
V4 Obligations Framework
V.8 Service Management Requirement Addendum v0.8
•
•
•
•
•
•
•
Both set out the minimum and mandatory requirements;
End user may ask for better service performance
Management Reports align to RM1045 but include amendments
Supplier will need to monitor service boundary's carefully to comply
HSCN sold to NHS on HSCN Performance information
Still under development input managed by Innopsis
Upon signing the Deed you agree to meet the Service Management Obligations
38
Current Programme Key Milestone Dates
Michael Bowyer
39
2016
Jul-Sep
Oct-Dec
Jan-Mar
HSCN
capabilities
Jul-Sep
TN operational (for duration of migration to HSCN)
Implement PN
Procurements – PN, ANM,
NAS Partner
Design
Design
complete
PN live
ANM live
Implement ANM
NAS live
Build in-house capabilities – SC, NAS,
Marketplace (with CCS), Authority functions
OF agreed
Develop in-house capabilities over time
Case approved – sign contracts
for TN, PN, ANM, NAS Partner
Approvals
Prepare Case
Marketplace
HSCN compliant
services available
Agree HSCN OF
Migration
Apr-Jun
TN proposal agreed
Negotiate TN
Business Case
2017
Design AP
Compliance assessment (ongoing)
AP initial round
Provision services
AP subsequent rounds
Migration planning
KEY:
TN: Transition Network
PN: Peering Network
ANM: Advanced Network Monitoring
NAS: Network Analytics Service
SC: Service Co-ordinator
CCS: Crown Commercial Service
OF: Obligations Framework
AP: Aggregated Procurements
Pilot / early adopter phase
Full rollout
N3 contract ceases
40
Questions
41