Care Identity Service 2 (CIS2, authentication)

CIS2 enables secure authentication over the internet and can reduce dependence on traditional network-based access arrangements.

The service is designed to provide secure and flexible access to NHS systems while maintaining appropriate identity and security controls.

Examples of potential benefits include:

• improved user experience when accessing national NHS systems;
• support for modern authentication methods;
• reduced reliance on physical Smartcards for some use cases; and
• greater flexibility for accessing clinical systems from approved devices.

As NHS services continue to modernise, CIS2 is expected to play an increasing role in supporting secure access across health and care settings.

CIS2 has been piloted and introduced across a range of health and care settings.

An ongoing long-running pilot involves:

• a small number of community pharmacies;
• ambulance service staff; and
• clinical hub teams.

As NHS digital programmes develop, the range of services and organisations using CIS2 may continue to expand.

CIS2 can support a range of authentication approaches, depending on the device, system and configuration being used.

Examples include:

• tablet-based authentication;
• Smartcard-based authentication;
• virtual Smartcard solutions;
• biometric authentication, where supported; and
• other approved authentication technologies.

Future developments may expand the range of supported devices and authentication methods.

As NHS authentication technology continues to develop, pharmacy teams should follow guidance provided by their system supplier and NHS organisations.

Care Identity Service 1 (CIS1) continues to support Smartcard administration and management.

Pharmacy teams that manage Smartcards may still need to use CIS1 for certain administrative tasks.

Read more in the CIS1 Smartcard management guidance.

NHS England publishes technical guidance and support materials for organisations developing systems that use CIS2 authentication.

Guidance includes information about:

• integrating with CIS2;
• identity and access management requirements;
• security standards; and
• authentication options.

Community Pharmacy IT Group (CP ITG) has previously discussed CIS2 developments with NHS representatives and IT system suppliers as part of wider work to improve pharmacy access to NHS digital services and reduce barriers associated with traditional authentication methods.