Healthcare is evolving through digitalisation and widening network capacity whilst simultaneously collecting a greater range and depth of data. The NHS is the largest integrated healthcare provider in the world with a supply chain consisting of more than 80,000 suppliers. The amalgamation of different estates, the multiplicity of legacy systems and the diversity of technology, people, processes and culture makes it a hugely complex environment. This is also vulnerable to Cyber Security attacks including data breaches where sensitive patient records may be attained for extortion, disruption or resale on the dark web. The current heightened political tensions and state sponsored cyber-crime only add fuel to this already challenging mix. In this evolving environment, it is imperative UK health organisations recognise the need to proactively manage and constantly review their Cyber Security posture as widely advocated by the NCSC for all the CNI sector.