Document filename: N3 Connectivity Guidance for Local Authority Organisations
Directorate / Programme
N3
Document Reference
Project
N3 BDG to PSN
NPFIT-N3-CMK-CMR-0027.01
Project Manager
Lee Ramsbottom
Status
Released
Owner
Lee Ramsbottom
Version
1
Author
Lee Ramsbottom
Version issue date
15/10/2013
N3 Connectivity Guidance for
Local Authority Organisations
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
Document Management
Revision History
Version
0.1
Date
0.2
0.3
Summary of Changes
First draft
First round of comments
12/9/13
0.4
Controlled document template applied
Incorporated comments from HSCIC
0.5
7/10/13
Incorporates comments from the Child Health team, IGSoC details and
reformatting
0.6
9/10/13
Final review version
0.7
10/10/13
Comments from Steve Shaw
0.8
14/10/14
Correction of IG processes for 3.1 and some minor text changes.
1.0
15/10/13
Note added to 3.1
Reviewers
This document must be reviewed by the following people: author to indicate reviewers
Reviewer name
Sue Dyson
Title / Responsibility
Date
Version
Mike Farrell
Stephen Humphries
Simon Shipman
Len Chard
Approved by
This document must be approved by the following people: author to indicate approvers
Name
Len Chard
Signature
Title
Date
Version
Glossary of Terms
Term / Abbreviation
GCF
What it stands for
GSi Convergence Framework
GCN
Government Conveyance Network- the “core” PSN network
The PSN Direct Network Service Provider that is owned and managed by
N3SP
Information Governance Statement of Compliance
Health DNSP
IGSoC
Page 2 of 10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
IG Toolkit
Information Governance Toolkit – An HSCIC hosted web site that
organisations use to demonstrate their IG compliance
N3
The existing NHS network
N3SP
Part of BT, N3SP deliver the N3 Framework Contract on behalf of the NHS
Non NHS organisation
An organisation that is able to use N3 but is not part of the NHS
PSN
The Public Sector Network (PSN) is a UK Government programme to unify
provision of network infrastructure across the United Kingdom public sector
into an interconnected "network of networks" to increase efficiency and
reduce overall public expenditure.
PSN IA Conditions
Public Services Network Information Authority Conditions
Document Control:
The controlled copy of this document is maintained in the HSCIC corporate network. Any
copies of this document held outside of that area, in whatever format (e.g. paper, email
attachment), are considered to have passed out of control and should be checked for
currency and validity.
Page 3 of 10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
Contents
1
Introduction
1.1
2
3
5
What is IGSoC?
5
2.2
What does completion of the IGSoC mean to an NHS organisation?
5
2.3
What purpose does the NHS sponsor role fulfill within the IGSoC process?
6
Direct Health DNSP connection
7
IG applicable to this connectivity type
7
Direct N3 Connection
8
IG applicable to this connectivity type
8
Single User Remote Access VPN for Non-NHS (N3-12-11)
5.1
6
5
2.1
4.1
5
Purpose of This Document
IGSoC
3.1
4
5
IG applicable to this connectivity type
N3 GCSX gateway
6.1
IG applicable to this connectivity type
Page 4 of 10
9
9
10
10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
1 Introduction
1.1 Purpose of This Document
Local Authorities have an increasing need to connect to N3 as various health services move
into their responsibility and connections to regional PSN compliant networks become more
common.
In terms of NHS information governance, Local Authorities are considered to be non-NHS
organisations.
This document:

Explains the current N3 connectivity options that are available to Local Authorities

Gives a brief summary of the IG compliance requirements for each option

Explains where more information can be obtained for each option.
2 IGSoC
2.1 What is IGSoC?
The Information Governance Statement of Compliance process (IGSoC) is the process by
which organisations enter into agreement with the Health and Social Care Information
Centre (HSCIC) for access to National Applications and Services (including access to
national infrastructure and networks such as N3). The process includes elements that set
out the terms and conditions for use of HSCIC systems and services in order to preserve
their integrity. The steps in the IGSoC process set out a range of Information Governance
and Security requirements which must be satisfied by an organisation prior to being
authorised to access Health and Social Care networks and information assets
Detailed information about IGSoC can be found at http://systems.hscic.gov.uk/infogov/igsoc
2.2 What does completion of the IGSoC mean to an NHS
organisation?
The IGSoC process (which includes the IG Toolkit as one of its gateways) remains the
overarching governance model applicable to all organisations wishing to connect to the N3
network and contains a number of gateways that are applicable in different circumstances.
These will vary depending upon the connectivity being requested and the status of the
organisation (NHS or non-NHS).
The Logical Connection Architecture (LCA) provides additional technical questions and
assessment that is primarily undertaken by non-NHS organisations as one of the gateways
of the IGSoC process. This is based on standard industry good practice, policies and
standards, and should not contain any areas which would not be expected in a managed ICT
estate.
Page 5 of 10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
Compliance with other standards such as ISO27001 will likely assist in the completion of the
LCA and the HSCIC Operational Security Team is able to provide small levels of assistance
in complex or unusual situations.
2.3 What purpose does the NHS sponsor role fulfill within the
IGSoC process?
N3 is a private network for the use of the NHS and their suppliers in the delivery of NHS
healthcare services. Any non-NHS organisation wishing to connect to the network requires
sponsorship from an NHS organisation or the Department of Health in order to verify that the
organisation has a legitimate business need to access the network.
Page 6 of 10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
3 Direct Health DNSP connection
The Health DNSP is a network, owned and managed by N3SP, that is PSN compliant. It
connects to N3 to allow bi-directional communication to the applications on it. At the time of
writing the Health DNSP is not connected to the PSN GCN, so an organisation connected to
the Health DNSP cannot access PSN services.
Two services are provided by N3SP to connect to the Health DNSP, one based on ADSL2+
and one based on 10Mb/s Ethernet. Both services are non-resilient, they do not have a
backup circuit as most standard N3 services do.
More information is available on the N3 web site at:
http://www.n3.nhs.uk/n3cloudconnect/N3PSN/
To speak to someone for more information or start the process to place an order, contact the
N3 Desk Based Account Managers by calling the N3 Help Desk on 0800 085 0503 and
selecting option 3.
3.1 IG applicable to this connectivity type
Local Authorities will need to complete the full Information Governance Statement of
Compliance. Organisations that have completed PSN IA Conditions will have been deemed
to have LGA equivalence already so will just need to complete IGT. Those Local Authorities
already connected directly to N3 will already have completed full IGSoC.
Access control will be applied and will limit access to authorised IP addresses within N3.
Note that it is anticipated that a reduced set of IGT requirements, for organisations that have
already completed PSN IA conditions, will become live in May or June 2014.
Page 7 of 10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
4 Direct N3 Connection
69 local authorities (at the time of writing) have already bought a direct N3 connection and
this service can still be purchased if required. The organisation is considered a non-NHS
customer and follows the same ordering process as any other non-NHS customer.
Further information can be found on the N3 website at:
http://www.n3.nhs.uk/n3cloudconnect/
It should be noted that a direct N3 connection includes a small allocation of addresses from
the N3 Private Address space (10.0.0.0/8). More information on N3 IP Addressing can be
found at: http://www.n3.nhs.uk/TechnicalInformation/N3IPnetworkaddressing.cfm.
To speak to someone for more information or to start the process to place an order, contact
the N3 Desk Based Account Managers by calling the N3 Help Desk on 0800 085 0503 and
selecting option 3.
4.1 IG applicable to this connectivity type
The organisation must complete a full Information Governance Statement of Compliance.
Access control will be applied and will limit access to authorised IP addresses within N3.
Page 8 of 10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
5 Single User Remote Access VPN for Non-NHS
(N3-12-11)
The Single User Remote Access VPN Service gives non-NHS organisations, including Local
Authorities, a means of creating a secure data path from a device (PC, laptop, etc.) via the
Internet to the N3 network. It is intended for use by non-NHS organisations providing
services to NHS organisations, or accessing services within NHS.
A managed security token and appropriate VPN software is provided.
More information can be found on the N3 web site at:
http://n3.nhs.uk/n3cloudconnect/HealthcaresecuritytokenfornonNHSusers.cfm
To start the process to place an order, contact the N3 Desk Based Account Managers by
calling the N3 Help Desk on 0800 085 0503 and selecting option 3.
5.1 IG applicable to this connectivity type
The organisation must complete a full Information Governance Statement of Compliance.
Access control will be applied and will limit access to authorised IP addresses within N3.
Page 9 of 10
Copyright ©2013 Health and Social Care Information Centre
N3 Connectivity Guidance for Local Authority Organisations
V1 15/10/2013
6 N3 GCSX gateway
Approximately 20 organisations use the GCF-N3 Interconnect, commonly called the GCSx
gateway, which is managed by Vodafone.
The gateway connects the N3 network to the GCF network, providing access to N3 for GCF
connected Local Authorities. There are two types of access allowed through the gateway;
access to N3 Spine services and access to applications and data hosted within NHS
organisations.
There is a one-off charge for configuring access to specified N3 applications. Ongoing costs
are included within the GCF Core Charge. The one-off charge includes technical, project,
change and service management activity to get customers connected, which Vodafone will
coordinate on their behalf.
An order for service is usually placed by the Local Authority directly to Vodafone.
Contact:
Louis Tang
GCF Customer Service Manager
Vodafone
Mobile: +44 7780 593 426
Direct Dial: +44 113 366 4133
Email: [email protected]
6.1 IG applicable to this connectivity type
Completion of the IGSoC application form and IG Toolkit assessment
Access control is applied at the GCSx Gateway to limit access to the N3 IP addresses
associated with the type of access required.
Page 10 of 10
Copyright ©2013 Health and Social Care Information Centre