February 4th 2025
The independent evaluation of the Better Security, Better Care programme highlights not only the impressive milestones achieved, but also the broader impact on the health and care system.
Transformative impact
Since the inception of the programme, the percentage of social care providers completing and publishing the Data Security and Protection Toolkit (DSPT) has surged from just under 15% in April 2021 to over 76% by August 2024. The independent evaluation by Cordis Bright attributes this success to collaboration between a dedicated central team and 28 local support organisations (LSOs), reaching over 27,000 provider locations across the country.
The programme’s focus on local engagement and targeting small care providers has yielded dramatic change. For instance, South East London experienced a 45% increase in small care providers compliance with the DSPT between July 2023 and July 2024, demonstrating the effectiveness of targeted local initiatives. Bradford Care Association, Care and Support West, and Dorset Partners in Care also reported compliance increases between 21% and 45%, underscoring the value of tailored support for smaller providers.
Benefits of Local Support Organisations
Local Support Organisations have been pivotal in the programme’s success, evolving significantly since 2021. Initially focused on helplines and webinars, LSOs now concentrate on one-to-one support, particularly for smaller providers, fostering deeper engagement and sustainable behaviour changes.
Providers who seek more general support in their cyber security, such as through BSBC and LSOs, are less likely to suffer incidents and where they do, these are less likely to have material impacts. It is therefore likely that the wider support activities of the programme have an impact on cyber security in the sector than just completion of the DSPT in isolation.
LSOs have expanded their services beyond the programme, with 71% offering support around Digitising Social Care and 57% facilitating access to NHSMail. This diversification has strengthened their role within local health and care systems, enhancing integration and collaboration with local authorities and Integrated Care Systems (ICSs).
Wider impact and value for money
Crucially the evaluation identifies for main areas where the programme demonstrates good value for money:
- Return on investment in terms of preventing costly cyber-attacks and data breaches to participating organisations. For 2024, there is data available on the frequency and impact of cyber-attacks affecting social care providers specifically, from research undertaken by Ipsos / IPC.
- Reduction in administration costs for both social care providers and for the NHS through access to NHS Mail, digital record-keeping and Proxy Access achieved as a result of publishing the DSPT and therefore being eligible to apply for these services.
- In some instances, delivering a strategic focus for engagement between social care providers and the ICS and ICB’s which supports the wider agenda of integration and closer alignment between health and social care.
- Efficiency savings to the wider health and social care system arising from the digitisation of systems enabled by the completion of the DSPT.
The as yet unpublished Ipsos/IPC survey revealed that 33% of social care providers experienced a cyber incident over the past three years, compared to 40% of all UK businesses. Cordis Bright’s evaluation of the programme states: “This lower percentage may already reflect the impact of the DSPT and the supporting BSBC programme has had on the vulnerability of social care providers to cyber-attacks, given that average DSPT compliance over the previous 3 years was 57%.”
Financially, the programme demonstrates excellent value for money. The average cost of a cyber incident with a material impact on social care providers was £9,528, significantly higher than the £3,540 average for small businesses. The BSBC programme’s support has mitigated these risks, saving an estimated £15.5 million in avoided cyber incidents. For every £1 spent on the programme, there was a return of £1.91, highlighting its efficiency and impact. Under medium impact scenarios, the return on investment increased to £2.71 for every £1 spent, showcasing the programme’s effectiveness in reducing cyber risks and promoting data security across the sector.
Impact of the Action Research Fund
The Action Research Fund, introduced as part of the BSBC programme, has played a crucial role in driving innovation and continuous improvement within the sector. The fund supported several projects aimed at exploring new approaches to cyber security and data protection in adult social care. Organisations participating in these projects reported significant benefits, including enhanced research capabilities and actionable insights that have informed best practices across the sector. The collaborative nature of the Action Research Fund has also fostered knowledge sharing and capacity building among Local Support Organisations, further strengthening their ability to support care providers effectively.
Call to maintain momentum
Michelle Corrigan, Programme Director for Better Security, Better Care, reflected on the year’s achievements and the road ahead:
“The progress we’ve made in embedding cyber security and data protection practices within the adult social care sector is nothing short of remarkable. However, the journey doesn’t end here. It is crucial that we retain this momentum to ensure ongoing protection and resilience against evolving cyber threats. We are now focused on providing practical support to enable care providers to implement good cyber security.”
Ethan Gray, Cyber Policy Lead at the Department of Health and Social Care, welcomed the evaluation, stating:
“The Better Security, Better Care programme has delivered substantial improvements in data protection and cyber security across adult social care, laying a strong foundation for the future of digital transformation. The government has an aim for all care providers to be digitised by the end of this parliament and to support this we will build on the success and lessons of this programme, working to shape a secure digital future for those working in and drawing on care.”
Notes to editors
About Better Security, Better Care
Better Security, Better Care is the national and local support programme to help adult social care providers to store and share information safely. It covers paper and digital records and focuses on helping care providers to complete the Data Security and Protection Toolkit – the annual, online self-assessment. It is delivered by Digital Care Hub, with support from 28 local support organisations across England.
Read Evaluation of the Better Security, Better Care Programme 2024:
Contact [email protected]
Tel 07792 636761
View all News