In May 2025, NHS England and the Department of Health and Social Care issued the Cyber Security Supply Chain Charter, an NHS initiative establishing shared expectations of good cyber practice. Since November 2025, suppliers began to formally sign up.
NHS England have now shared a second open letter to all suppliers to the NHS and wider health and care system, outlining the next phase of work to strengthen cyber resilience across the sector.
You can find the full letter here.
date: 2 February