Information Security Management – NHS Code of Practice 2007

The ‘Information Security Management: NHS Code of Practice’ is a guide to the methods and required standards of practice in the management of information security, for those who work within or under contract to, or in business partnership with NHS organisations in England.

http://systems.digital.nhs.uk/infogov/codes/securitycode.pdf