Access and Smartcards

Determine the number of staff that will require access to the Child Care Alert (see task 17 within Business Processes section).

Contact the person responsible for issuing and configuring Smartcards for your organisation (the registration authority manager, sponsor or equivalent person/local NHS organisation) to source NHS Smartcards and/or NHS Smartcard readers, in line with your local organisational process. Multifactor authentication may be considered as an alternative to physical Smartcard in some organisations.

All staff requiring CP-IS access who do not already have an NHS smartcard will need to follow a local administrative process to apply for one. Your CP-IS project lead should ideally coordinate this for everyone who will need one.

Getting Smartcards and Smartcard readers can take time so start this step as soon as you can so that it doesn’t lead to delays later. 

Advice on the Registration Authority process is available.  

Obtain details on how to access CP-IS from your local system supplier, this could be via a smartcard or access permissions on the system. 

When the staff who need access to the Child Care Alert have been identified (step 17 in the

Business processes section) you will need to ensure that the correct Role Based Access Control (RBAC) codes are added to their Smartcards (or added to their access permissions on the system as required by some integrated solutions). 

Identify who is responsible for issuing and configuring Smartcards for your organisation for example the registration authority manager, sponsor or equivalent) and have the following codes added to cards for the staff concerned.  

Note that if staff are already accessing the Summary Care Record (SCR) they will only need one extra code adding to their smartcard (B0107).  If they are not already accessing SCR, two codes need to be added (B0107 and B0264).

Although the code designations can generally be attributed based on ‘scheduled’ (B0170) or ‘unscheduled’ (B0107) care, there may be examples of scheduled services where an Access to Service Notification (ASN) is viewed as desirable. These exceptions are not subject to local discretion.

Once the correct code has been added, there are two patient records on the NHS Spine that can be used for local testing and training. Note these are test patients and not genuine patients. Genuine NHS numbers and records should never be used for testing or training purposes (as searching for other patients may generate an alert).

Use NHS Numbers 9990276579 and 9990275831 for these purposes.

Ensure each member of staff checks and can see the Child Care Alert on these test patients when the codes have been added to their Smartcards as this ensures they have the correct access.