The assurance process that has been adopted for the NHS Booking standard is based on the following principles:

Assurance principles

High-level design principles related to the assurance processes

• assurance should be lightweight but appropriate
• testing should be automated where possible to establish technical conformance
• a level of self-certified solution assurance will be made available to organisations deploying the APIs
• all artefacts related to assurance and testing should be made available as part of the ecosystem (public domain) prior to engaging in a formal NHS Digital assurance process
• a set of evidence based around self-assurance activities will speed up the assurance process

NHS Digital Onboarding and Assurance process

The assurance process is illustrated in the following interactive diagram. For detail on each stage please click on the relevent step:

Supplier

Explore requirements and standards

Explore published documentation covering detailed technical and business requirements available on NHS Developer portal return

Design, build and self test

Using published documentation, gaining access to NHS Digital integration test environments design, build and self test solution return

Integration testing

Technical conformance with Solutions ASsurance (SA) team. Undertaking testing and validation activities against a services requirements. Providing evidence where applicable. return

Completion of SCAL

Completing the Supplier Conformance Assessment List (SCAL).

N.B. If the supplier is new to NHS Digital a completely new SCAL will be required. If the supplier has previously been onboarded by NHS Digital then only an uplift of the current SCAL (by completing service specific tab) is required.
return

Technical conformance certificate

On successful completion of technical conformance NHS Digital solutions assurance provider a Technical Conformance Certificate

Connection agreement

With completed SCAL and Technical Conformance Certificate in place NHS Digital live services arrange for a Connection Agreement to be signed and enable product creation/uplift on the EPR tool. return

Service provider/comissioner

The following process would be completed by the comissioning organisation that is responsible for the service that will be using the products assured by the supplier product assurance process

Elegibility and prerequisites

Establish the required pre-requisites are in place: e.g.

• Clinical Safety
• Data Securty return

NHS Digital Deployment Toolkit

Ensure adherance to NHS Digital service specific requirements return

Local Assurance

Undertake local risk assessments for implementation incluiding assessment of changes to or nwe business processes, technology and non-functional requirements.

Undertake user acceptance testing return

End user preparation

Training completed for end users and any local configuration/RBAC changes in place. return

Service provider and supplier

Technical Prep

Technical checks to live spine URL, checking live config of endpoints etc.. confirming all necessary certificates are in place. return

Business Prep

Business processes and resources ready return

Go-Live

Technical and Business go-lives return