Dear Colleague

Cyber Security – Community Pharmacies

You will be aware that cyber security is a global issue and that systems worldwide are being continually targeted to access data and financial assets.  It would appear that no system – personal or corporate – is immune from these attacks.  If you are a small or medium-sized enterprise (SME), the National Cyber Security Centre (NCSC) estimates that there is around a 1 in 2 chance that you will experience a cyber security breach.

CPNI has become aware of incidents within the community pharmacy sector outside Northern Ireland where attempts have been made to interfere with the data held.

Community pharmacies hold a large volume of sensitive personal and financial data and any breach of the security systems protecting this information could be very damaging to the economic stability of the business and the welfare of patients.  It may also leave contractors open to possible punitive action by the Information Commissioner’s Office under DPA and GDPR legislation, with resulting reputational damage to the individual and the profession.

CPNI has been working closely with the cyber security lead from the Police Service of Northern Ireland who has held discussions with a number of contractors here to understand the challenges that contractors face in managing their data.  There is a range of potentially vulnerable devices within the community pharmacy setting including PMR systems (which may be supported to varying levels by the supplier), and extending to routers, laptops, mobile phones and printers.

Several initiatives have arisen from this collaborative work with the police (which draws on information produced by the National Cyber Security Centre), and from discussions with Prof Colin Adair, NICPLD.

In collaboration with the police cyber security team and NICPLD, CPNI will:

  1. Forward guidance issued by the police detailing five key steps that can be taken to improve cyber security (attached);
  2. Forward regular cyber security updates;
  3. Contribute to the development of an eLearning programme to be launched by NICPLD in early 2021; and
  4. Host a virtual training evening led by the police cyber security team.

The step-by-step packages in (a) above cover the areas detailed below and further information can be accessed by clicking on the topic headline in the guidance:

  • Backing up your data
  • Protecting your organisation from malware
  • Keeping your smartphones (and computer tablets) safe
  • Using passwords to protect your data
  • Avoiding phishing attacks

Following the relevant advice in the guidance packages and in the eLearning programme will significantly increase your protection against the most common types of cyber crime.  The topics covered are easily understood and cost little to implement.  While this guidance cannot guarantee protection from all types of cyber attack, it does demonstrate how simple steps can greatly contribute to the protection of your data, assets, and reputation.

Contractors are reminded that the storage and back up of patient sensitive data and any amendments to your systems should be carried out in line with advice from your PMR system provider and in line with Data Protection legislation.

CPNI team and police colleagues will be happy to further assist you where necessary.

Yours sincerely

SENT FOR AND BEHALF OF GERARD GREENE | Chief Executive

Download

Dear Contractor

Update on the Falsified Medicines Directive (FMD) in Northern Ireland post 31 December 2020

Background

As you are aware, the UK has left the EU and the Transition Period ends on 31 December 2020.

On that date, some regulatory requirements will no longer apply but certain EU legislation will continue to have effect in Northern Ireland under the Northern Ireland Protocol (NIP) (part of the UK’s Withdrawal Agreement with the EU).

The UK FMD Working Group for Community Pharmacy has issued an update outlining the position of the Falsified Medicines Directive (FMD) in Northern Ireland post 31 December 2020 (attached).

Summary

Under the terms of the NIP, the FMD will still apply in Northern Ireland, for at least four years (until the NIP is due to be reviewed).

  • All end users in Northern Ireland, including pharmacy contractors, will remain connected to the UK National Medicines Verification System (UKMVS) run by SecurMed UK.  They need to continue to verify and decommission any packs with FMD safety features (unique identifiers and anti-tamper devices) in line with the requirements of relevant EU and UK medicines legislation.
  • SecurMed UK will continue to provide end user registration and necessary support to enable Northern Ireland end users to decommission packs with FMD identifier features into 2021 and beyond.

Action

Contractors are asked to:

  1. Ensure that their dispensary teams are aware of the content of this letter;
  2. Ensure that their pharmacy is registered with SecurMed UK (https://securmed.org.uk/what-do-you-want-to-do/registration-process/) if not already registered; and
  3. Continue to verify and decommission FMD-compliant packs of prescription medicines.  Refresher training should be carried out if needed.

For further guidance please contact your software supplier in the first instance, and check for further help on the SecurMed UK website (www.securmed.org.uk).

The CPNI team will continue to support you on these matters.

Kind regards

Mike

Sent on behalf of Prof Mike Mawhinney | Head of Regulatory Affairs

Download

Dear Colleague

IMPORTANT UPDATE to NORTHERN IRELAND CONTACT TRACING SERVICE & PERSONAL PROTECTIVE EQUIPMENT (PPE) ORDERING

Please find attached for your attention, correspondence from Joe Brogan, Assistant Director of Integrated Care, Head of Pharmacy and Medicines Management.

Summary

  • Northern Ireland Contact Tracing Service Update

It has been agreed with the Northern Ireland Contact Tracing service that community pharmacies will be recognised as a primary care clinical setting and that assessments will be performed by one of the PHA clinical leads.

  • PPE Ordering Update

The quantities of PPE mask type IIR that can be ordered by community pharmacies for normal pharmacy activity have been amended and allocation will be made based on the average number of staff working in each community pharmacy per day.

Contact Details for Local Integrated Care Offices:  

Yours sincerely

SENT FOR AND BEHALF OF GERARD GREENE | Chief Executive

Download

Dear Colleague,

CPNI appreciates there is an ever increasing volume of contractor emails to keep on abreast of. As a result CPNI will be sending out a weekly summary of ‘Drug Alerts’ and ‘Shortage Updates’.

In the meanwhile, pharmacy team(s) can keep updated with drug alerts and shortages information via CPNI’s contractor calendar here or via the BSO website here.

Weekly Summary 13.11.2020
Drug alerts available here: BSO Communications (Drug Alerts)
MPS 2732 – Medicines Recall – Ancotil 2.5g/250ml sol for infusion 12th November 2020
MPS 2731 – Medicines Recall – Sodiofolin 50mg/ml sol for injection 11th November 2020
MPS 2728 – Medicines Defect Information – Kolanticon Gel 200ml 10th November 2020
Shortages Information available here: BSO Shortages Information
MPS 2730 – Trifluoperazine 1mg in 5ml syrup – Supply Alert 11th November 2020
MPS 2729 – Dulcolax (bisacodyl) 5mg and 10mg Supp  – Supply Alert 11th November 2020
MPS 2725 – Nalcrom 100mg caps – Supply Alert Updated 11th November 2020
MPS 2722 – Konakion MM Paediatric – Supply Alert Updated 11th November 2020

Please bring this to the attention of your pharmacy team(s).

Kind regards,

Kerry

Sent on behalf of Kerry Grimes | Governance & Support Pharmacist

Dear Colleague

HSC (SQSD) 5/19 EARLY ALERT SYSTEM  – UPDATED CIRCULAR

Please find attached for your attention, correspondence from Dr. Lourda Geoghegan, Deputy Chief Medical Officer.

Summary

The Early Alert System provides a channel which enables HSC Chief Executives to notify the Department in a prompt and timely way of events or incidents which have occurred in the services provided or commissioned by their organisations, and which may require immediate attention by Minister, Chief Professional Officers or policy leads and/or require urgent action by the Department.

Action

Contractors should note:

  • The content of this letter
  • Family Practitioner Services should notify the HSC Board about events within the services they provide that meet one or more of the criteria as described in Annex A. The HSC Board will then notify the Department.
  • It is the responsibility of the reporting Family Practitioner Service practice to ensure that a senior person from the practice speaks in person to the Director of Integrated Care (or deputy) in the HSC Board regarding the event.
  • COVID 19 incidents/outbreaks that are being managed as part of usual business should not be routinely reported through the Early Alert system. Community Pharmacies should continue to provide regular updates to HSCB through established SITREP arrangements.

Yours sincerely

SENT FOR AND BEHALF OF GERARD GREENE | Chief Executive

Download