PMAANZ

HNZ: Primary & Community Care Cyber Security Maturity Assessment - 17 October 2022

HNZ: Primary & Community Care Cyber Security Maturity Assessment - 17 October 2011

Kia ora koutou,

PLEASE READ & ACTION- The primary & community cyber security maturity assessment is now LIVE! Please distribute to your members and partner healthcare providers. If you are a provider yourself, please complete your respective assessment.

The CEOs of Te Whatu Ora and Te Aka Whai Ora, Margie Apa and Riana Manuel, wrote to you about this assessment in September (letter attached). This assessment is important and timely. With your input we will understand the cyber security situation in primary & community care. Following this assessment, we will jointly build a cyber security programme that addresses your cyber security needs. This assessment is anonymous and is open from 17 October until 25 November.  Please make the time to provide answers as accurately as possible. For more information and support for this assessment please read instructions below and feel free to join weekly call clinics for discussion and advice on the assessment.

Select from two different assessment links to best suit your organisation:

Assessment for Micro-Small primary & community care provider

Link: https://tewhatuora.jotform.com/222777366131963

Password: CSMAms@22

 

Use the above link if the bullet points below describe your organisation

  • A stand-alone business / organisation
  • Based in a single location with a basic IT system
  • Minimal or no IT support in-house
  • Not involved with integrating/developing software systems or web applications in-house
  • Approximate staff of 1 - 25
  • Managing a population less than 10,000

 

 

Assessment should be completed by Directors/Business Owners/Senior Management.

Assessment for Medium-Large primary & community care provider

Link: https://tewhatuora.jotform.com/222815804606960

Password: CSMAml@22

 

Use the above link if the bullet points below describe your organisation

  • You may have a presence in one or more locations
  • May have some staff in-house for managing IT. This could be further supported by external IT and security vendors
  • May be involved with health data collection from other regional providers and have a data warehouse or a similar setup
  • May be involved in providing IT support to other healthcare providers
  • May be involved with integrating/developing software systems or web applications in-house
  • Approximate staff of 25 or more
  • Managing a population greater than 10,000

 

Assessment should be completed by Digital & Data or cyber security leaders/managers.

Help available to complete the assessment - To help complete the maturity assessment, call clinics are available for you to join and ask questions throughout the six-week period. Please feel welcome to join our korero at a time.

TUESDAYS – 5 PM to 6 PM

Join Zoom Meeting
https://mohnz.zoom.us/j/2106603366?pwd=UGh0UDdFNHZlMDhZRS90K0F5RjB3dz09  

OR:

GO TO https://zoom.us/join

Meeting ID: 210 660 3366
Passcode: H5NZ5TFuTr

THURSDAYS – 12 PM to 1 PM

Join Zoom Meeting
https://mohnz.zoom.us/j/2106603366?pwd=UGh0UDdFNHZlMDhZRS90K0F5RjB3dz09

OR:

GO TO https://zoom.us/join

Meeting ID: 210 660 3366
Passcode: H5NZ5TFuTr

 

How to complete the assessment

There are 32 questions that are segregated based on specific areas in cyber security. It will take about 45 minutes to complete. We know how busy you are so there is a ‘Save and continue later’ option to suit your schedule. You can also share the assessment with colleagues using the “Get Shareable Link”. Instructions on how to use the save and share features are attached to this email.

ADDITIONAL HELP for MICRO-SMALL PROVIDERS only – Please note that, the questions for endpoint security and network security may be technical in nature. You may want to seek support from your IT provider to complete them. If your IT support provider charges you for their mahi to contribute to this assessment, they can raise the invoice directly to Te Whatu Ora to claim reimbursement. IMPORTANT – You must approve the invoice beforehand, and it can only be for an hour of vendor’s time. Please check that the claim is a reasonable amount and, it is as per your contracted support time with your IT Vendor.

IT Vendor to raise the invoice to -

Nancy Taneja

Te Whatu Ora

133 Molesworth Street, Thorndon, Wellington, New Zealand, 6011

Description: 222300116 - Financial aid for Micro-Small Primary & Community Care (PCC) providers for cyber security maturity assessment

Email to: DDadmin@health.govt.nz

NOTE: The invoice email needs to include proof of your approval and the IT vendor must provide their GST and contact details.

I would like to take this opportunity to reiterate that we value your participation. Thank you in advance for the time you can share with us on this mahi.

Where appropriate please cascade this email widely via your member and peer networks, including to any relevant partners and network providers. It is critical to reach a wide-ranging of primary & community care audience to collect a representative and meaningful data.

If you have any questions, please reach out to me.

 

Ngā mihi

 

Nancy Taneja

Chief Information Security Officer – Primary Health Sector

Data and Digital

waea pūkoro: 022 043 1373 | īmēra: nancy.taneja@tewhatuora.govt.nz