Darrall Pullen

Birmingham

Solutions Architect

Do I have confidence in the Muppets running NPiFT? NO categorically not. If the project wants to truly test its security model then I suggest you go beyond the norms for security testing. May I IMHO suggest that you try the following:-
Given that this is probably the biggest ever IT project from the UK government that they lay aside a £1m prize for anyone who can demonstrate a security flaw that allow access to the details of patient information or penetrates the NPfIT infrastructure. That is bate for anyone enough to prove how insecure this project is. Heck for £1m I will even do it myself. I've undertaken similar initiatives myself (in a previous life)for financial institutions including 'world' stock exchanges (legitimate I must add). The weakest links ALWAYS get overlooked especially by the 'Big boys'!