System settings, standards and updates
Published on: 16th July 2015 | Updated on: 22nd July 2026
Your pharmacy IT systems rely on the correct settings, software versions and hardware to access NHS services safely and reliably.
Before installing, upgrading or changing any software on pharmacy computers, speak to your IT system supplier or IT support provider. Making changes without their advice could:
- affect how your IT system works;
- disrupt access to NHS digital services;
- create security risks; or
- invalidate support arrangements with your supplier.
In the past, pharmacy teams reported problems after independently upgrading internet browser software. Some changes prevented access to NHS Smartcard services, while older software versions could stop NHS applications from working properly.
Keeping your systems up to date and aligned with NHS requirements helps ensure continued access to essential NHS digital services.
The NHS Warranted Environment Specification (WES) sets out the technical standards needed for NHS applications to work correctly.
The specification includes requirements for:
- operating systems;
- internet browsers;
- software components and runtime environments;
- Smartcard-related software and drivers; and
- other technical settings needed to support national NHS services.
Your IT support provider or IT system supplier should be familiar with the WES requirements and help ensure your pharmacy systems remain compatible with NHS services.
If systems use software versions that fall outside the WES requirements, there is a risk that NHS applications may not perform as expected.
Where a supplier recommends settings that differ from the WES, discuss whether a compatible solution can be found which supports all the systems and services your pharmacy needs.
Examples of NHS services and applications that may depend on WES compliance include:
Windows end-of-life guidance
Microsoft regularly ends support for older versions of Windows. Once support ends, security updates are no longer routinely provided, increasing cybersecurity risks.
If your pharmacy uses older operating systems, speak to your IT system supplier about upgrade plans and any steps needed to reduce risk while systems are being updated.
Community Pharmacy IT Group (CP ITG) has previously produced guidance to support organisations planning for Windows end-of-life transitions.
Read more: Preparing for Windows end-of-life cycles (CP ITG briefing).
Why this matters
Using unsupported operating systems can:
- increase vulnerability to cyber attacks;
- affect compliance with data security requirements;
- reduce compatibility with NHS services; and
- make it harder for suppliers to provide support.
Software updates and DSPTK
Regular software updates are an important part of maintaining secure and reliable pharmacy systems.
If you are unsure whether software should be updated, contact your IT support provider or IT system supplier before making changes.
Good practice includes:
- enabling automatic updates where appropriate;
- manually updating software that cannot update automatically;
- removing or replacing unsupported software; and
- keeping an up-to-date record of systems and software versions.
Data Security and Protection Toolkit (DSPTK)
The Data Security and Protection Toolkit (DSPTK) includes requirements relating to software maintenance and security updates.
Pharmacy guidance is available at:
DSPTK guidance: cpe.org.uk/dsptk
Some pharmacy owners use the DSPTK asset register template to record:
- hardware assets;
- software versions;
- operating systems; and
- update status.
Templates are available at:
DSPTK templates: cpe.org.uk/dstemplates
Some IT system suppliers allow pharmacy owners to purchase and manage their own hardware.
If this applies to your pharmacy, always check with your supplier before buying new equipment.
Your supplier can confirm whether the proposed hardware:
- meets required specifications;
- supports NHS services and applications;
- is compatible with your IT system; and
- can be supported effectively.
Speaking to your supplier before making a purchase can help avoid unnecessary costs and compatibility problems.
IT system suppliers and software providers supporting community pharmacy should aim to align their products with NHS WES requirements where appropriate.
Maintaining compatibility with NHS standards can help:
- reduce technical issues for pharmacy customers;
- support reliable access to national NHS services;
- improve user experience; and
- minimise disruption when NHS systems are updated.
Further information
Read more:
- Warranted Environment Specification (WES) information from NHS England;
- Care Identity Service guidance;
- Electronic Prescription Service (EPS) guidance; and
- Summary Care Record application (SCRa) information.
For more information on this topic please email it@cpe.org.uk
