Imprivata enhances NHS access security with passwordless controls

Imprivata has introduced new capabilities designed to help NHS organisations and UK healthcare providers meet the unique demands of the UK’s evolving compliance, cybersecurity, data protection landscape, including the Cyber Assessment Framework (CAF)-aligned Data Security and Protection Toolkit (DSPT) and Care Identity Service (Spine) Authentication.

Imprivata Enterprise Access Management (EAM) offers context-aware passwordless authentication, high-assurance identity verification, and AI-powered behavioral analytics, expanding the company’s leading solutions for improving workflow productivity while meeting the unique demands of the UK’s evolving compliance, cybersecurity, and data protection landscape.

“Providers and Trusts across the NHS system continue to rely on Imprivata to deliver solutions that remove workflow friction while bolstering security. As UK healthcare organisations face evolving compliance and operational challenges, our expanded EAM platform will help them meet these new requirements while ensuring clinicians have fast, seamless access to the resources they need to care for patients,” said Fran Rosch, CEO of Imprivata.

“Imprivata EAM delivers these workflow, security, and compliance benefits from a single, comprehensive platform, which also helps reduce cost and drive meaningful return on technology investment, which is critical as budgets continue to tighten,” Rosch continued.

Addressing UK-Specific identity and access challenges

UK health and care systems are under increasing pressure to adopt modern, standards-based approaches to identity, authentication, and access control, while demonstrating compliance to national assurance frameworks such as the CAF-aligned DSPT and NHS England Spine Authentication, a standards-based identity authentication service. These and other initiatives underscore the need for strong authentication and access management practices across NHS organisations.

The new EAM functionality delivers tailored capabilities that support NHS identity and cyber security priorities:

• CAF-aligned DSPT & identity assurance: Advanced access management and passwordless authentication help NHS organisations strengthen identity assurance, reduce reliance on shared credentials, and demonstrate multi-factor authentication (MFA) controls required under regional requirements such as the CAF-aligned DSPT. This includes detailed reporting and audit trails to support toolkit submission and independent assessment evidence.
• Seamless passwordless experience: Clinicians and care staff benefit from friction-free, secure login methods that reduce login fatigue, increase productivity, and align with NHS workforce needs. These options support the wide range of authenticators and help drive adoption of secure access without compromising user experience.
• Role-based access and audit-ready controls: Built-in role and attribute-aware policies ensure that authenticated users are granted precisely the access they need, helping NHS organisations demonstrate cyber framework compliant access control and accountability while reducing the surface for misuse or lateral movement.

Imprivata EAM addresses these challenges by delivering a unified access management platform to support all enterprise users and workflows while also enabling a seamless, consistent user experience. The platform supports a wide variety of authenticator options and combinations to give users the flexibility to meet their specific requirements and preferences. Platform capabilities include:

• Advanced passwordless authentication, including support for integrated face authentication technology to improve security while simplifying access for users
• High-assurance identity verification to enable secure onboarding, help desk authentication, and self-service password reset
• Risk signaling and behavioral analytics to determine and respond to potential security threats associated with users accessing corporate resources
• Secure access for VPN-less remote access built on Zero Trust principles to provide a seamless experience for users outside the network
• Operational analytics that provide near real-time workflow and access data to drive more informed, strategic decisions