Imprivata expands access management for NHS cybersecurity compliance
Imprivata has expanded its access management platform with new tools aimed at helping NHS organisations meet cybersecurity and identity requirements.
The company has added context-aware passwordless authentication, high-assurance identity verification and AI-powered behavioural analytics to its Enterprise Access Management platform.
The changes are intended to support UK healthcare organisations working towards requirements including the Cyber Assessment Framework-aligned Data Security and Protection Toolkit and NHS England’s Care Identity Service (Spine) Authentication.
The frameworks are intended to support standards-based approaches to identity, authentication and access control across NHS organisations.
Imprivata says the expanded platform can help organisations strengthen identity assurance, reduce reliance on shared credentials and demonstrate multi-factor authentication controls.
It also provides reporting and audit trails intended to support toolkit submissions and independent assessment evidence.
The platform includes passwordless login methods for clinicians and care staff, with support for different forms of authentication, including integrated face authentication technology.
Role and attribute-based access controls are designed to ensure authenticated users are given the access they need.
Imprivata says the controls can also help organisations demonstrate accountability while reducing the potential for misuse or lateral movement.
Fran Rosch, chief executive of Imprivata, said: “Providers and Trusts across the NHS system continue to rely on Imprivata to deliver solutions that remove workflow friction while bolstering security.
“As UK healthcare organisations face evolving compliance and operational challenges, our expanded EAM platform will help them meet these new requirements while ensuring clinicians have fast, seamless access to the resources they need to care for patients.
“Imprivata EAM delivers these workflow, security, and compliance benefits from a single, comprehensive platform, which also helps reduce cost and drive meaningful return on technology investment, which is critical as budgets continue to tighten.”
Other capabilities include high-assurance identity verification for secure onboarding, help desk authentication and self-service password resets.
The platform also uses risk signals and behavioural analytics to identify and respond to potential security threats linked to users accessing corporate resources.
Imprivata says it supports remote access without a virtual private network using Zero Trust principles, providing access for users outside the network.
Operational analytics provide near real-time information on workflows and access, which the company says can support more informed strategic decisions.
