Cyber Security in Care: Protecting People, Data and Trust

The care sector is becoming a prime target for cyber criminals. With increasing use of digital care records, remote access, apps, personal devices and online communication, the sector is more connected than ever, and therefore more exposed. A single breach can disrupt care delivery, shut down systems, expose personal data and cause lasting reputational damage. 

Cyber security is no longer a technical add-on; it is a fundamental part of delivering safe, high-quality care. It sits at the heart of safeguarding, good governance and business continuity. While the DSPT provides a baseline, it cannot prevent human behaviours that lead to breaches attributed to; accidental sharing, weak passwords, risky messaging apps or loss of devices. 

To support providers, Care England has worked with the Cyber Resilience Centre (CRC) and the Cyber Centre of Excellence (CCoE) to deliver two complementary cyber programmes. The CRC “Lunch & Learn” series helps leaders understand the policy landscape, threat types and the organisational responsibilities that shape cyber readiness. The CCoE workshops provide hands-on guidance to strengthen frontline practice and reduce real-world risk. 

Together, these sessions are designed to help providers: 

• prevent avoidable breaches 

• strengthen compliance with CQC and data protection expectations 

• build a cyber-aware culture 

• protect residents, staff and organisational reputation 

Cyber criminals only need one weakness. Our defences depend on people, culture and awareness, not just technology. By investing in cyber resilience now, providers can protect the continuity of care, maintain trust and stay ahead of evolving threats.

Choose the sessions that suit your role, or attend the full series for maximum benefit. 

 

CRC Lunch & Learn Sessions

Policy and awareness – 30 minutes each

Webinar One: Cyber Threats in Care: What You Need to Know Now

12:00 pm – 12:30 pm
Tuesday 29th October, 2025

Whether you’re working on the front line, in management, or supporting behind the scenes, this flagship webinar is your essential introduction to the cyber risks facing care settings today and how you can protect your organisation, colleagues, and those in your care. Don’t miss this essential session to learn how to best protect your care setting from cyber crime.

---

Webinar Two: Personal Devices, WhatsApp & Data Sharing: Are You Putting People at Risk?

12:00 pm – 12:30 pm
Wednesday 5th November, 2025

This free police-led webinar is designed to help you understand how personal technology use affects your organisation’s data security, and what steps you can take to stay safe, compliant, and in control. Don’t miss this essential session to learn how to best protect your care setting from cyber crime.

---

Webinar Three: Spotting Human Error: Building a Cyber Aware Culture in Care

12:00 pm – 12:30 pm
Tuesday 18th November, 2025

This free police-led webinar focuses on how to spot, reduce, and prevent human error in your organisation. You’ll learn how to build everyday cyber awareness across your teams, strengthen your digital culture, and reduce risk – no technical expertise required.

 

CCoE Workshops

Practical cyber skills – hands-on guidance – 90 minutes

Workshop One – Cyber in Care: How Much Should You Know?

The free online session aims to empower care leaders, managers and frontline teams from residential and domiciliary care environments with practical, jargon-free advice on how to build digital resilience and protect their organisations from growing cyber threats.

---

Workshop Two – The Deep, the Dark and the Hidden Dangers

Workshop Two will explore the dark web and the hidden threats that can impact care organisations. Attendees will learn how login credentials end up on the dark web and how this exposure can lead to cyber-attacks. After attending Workshop One, participants can sign up for a free dark web scan from the Cyber Centre of Excellence to identify any compromised credentials linked to their organisation’s email domain, along with tailored guidance to address vulnerabilities.

---

Workshop Three – Resilience, Recovery & Incident Response

Workshop Three, the final session, will focus on continuity and recovery planning. It will provide templates, checklists, and exercises to help organisations prepare for and respond to cyber incidents. Participants will explore tools such as digital twin visualisation and tabletop exercises to build stronger preparedness and resilience.