Silvia Health Achieves Cyber Essentials Certification

A key milestone in our commitment to protecting patient data and building trust with NHS partners

Silvia Health has achieved Cyber Essentials certification, the UK government-backed cyber security standard administered by IASME. This marks an important step in our governance journey as we prepare for NHS pilot deployment and continue building a platform that handles sensitive patient information responsibly.

What is Cyber Essentials?

Cyber Essentials is a UK government-backed certification scheme that helps organisations demonstrate they have essential controls in place to protect against the most common cyber threats. The scheme is administered by IASME on behalf of the National Cyber Security Centre (NCSC) and covers five key areas: firewalls, secure configuration, user access control, malware protection and security update management.

For organisations working with the NHS, Cyber Essentials certification is a baseline expectation. It forms part of the NHS Digital Technology Assessment Criteria (DTAC) and is increasingly required for digital health suppliers engaging with NHS trusts and primary care settings.

Why it matters for digital health

Digital health platforms that handle patient-reported information carry a responsibility to protect that data at every level. Cyber Essentials provides independent verification that an organisation has implemented fundamental technical controls to guard against common attack vectors.

For patients completing structured menopause assessments through Silvia, this certification provides assurance that the platform meets recognised security standards. For clinicians and NHS partners evaluating digital tools, it demonstrates that Silvia Health takes information security seriously and meets the baseline requirements expected of NHS digital suppliers.

Part of a broader governance approach

Cyber Essentials certification sits alongside the wider governance work Silvia Health has undertaken over the past year. This includes ICO registration as a data controller, completion of a full Data Protection Impact Assessment, clinical risk management documentation prepared with our appointed Clinical Safety Officers at The Digital Health Assurance Company, NHS Data Security Awareness training across the team, and ongoing DTAC self-assessment.

Together, these steps reflect our approach to building governance into the platform from the outset rather than retrofitting it later.