On 1 October 2025 the support level on the CIS1 Authentication service will reduce from Platinum to Silver.
Support hours will be reduced to 8:00am to 6:00pm Monday to Friday, and availability targets will also be reduced.
NHS England are in contact with all suppliers who still need to migrate to CIS2 to urgently determine their plans, and to confirm that they have clearly communicated to their customers and users the change in support and any risks they are now facing.
See a list of all applications that have migrated to CIS2.
If you have any concerns about whether your application is impacted, please speak to your supplier to determine their status, plans and how they intend to mitigate operational and clinical risks.
Other SLA changes
There are more changes in SLA planned. On 1 March 2026:
-
CIS1 will no longer have an SLA and will be supported on a 'reasonable endeavours' basis
-
costs will be reduced as much as possible by scaling down infrastructure and support to a bare bones service with little or no redundancy
By 28 February 2027 we will remove CIS1 Authentication from operational service, meaning it can no longer be used.
Why we're doing this
We are retiring CIS1 Authentication and migrating to CIS2 Authentication to:
- help NHS organisations take advantage of more modern authentication methods, including multi-factor authentication, security keys and biometrics
- remove dependencies on HSCN connections
CIS2 Authentication is also based on open standards, making it easier for suppliers to adopt changes compared to CIS1.
What this means for you
Suppliers and users of CIS1 Authentication services should switch to CIS2 Authentication now.
Suppliers who have not switched to CIS2 should inform their customers that their services will be on a reduced SLA from 1 October 2025.
If you as an NHS customer are impacted by these changes, the suppliers of your product is contractually obligated to inform you of upcoming changes. Please consult with your supplier or email [email protected] for more information.
