Health assurance

NHS Data Security and Protection Toolkit

NHS delivery needs more than a secure application. The organisation must be able to show how services, dependencies, incidents, people and information are governed in the context in which the system is used.

Work delivered for NHS-context platformDSPT official toolkit ↗

The framework

What NHS DSPT is for.

The NHS Data Security and Protection Toolkit is an online self-assessment and assurance framework for organisations that access NHS patient data and systems. It tests how data security and information governance are understood, controlled and evidenced.

How we work with it

Make the obligation usable.

Define the service, data flows, dependencies and organisation type in scope.
Connect technical controls to the information-governance evidence the assessment expects.
Prepare the supporting statements, records and improvement actions needed for review.

What we can leave behind

Evidence a reviewer can follow.

DSPT evidence map
Information-governance records
Improvement-plan support

Request documentation →

Concrete delivery evidence

How this showed up in client work.

The regulated health platform included NHS DSPT work as part of the route to live use across more than five NHS care systems. The case study describes DSPT alongside Cyber Essentials, clinical-safety cases, ISO 27001 and client security questionnaires.

Relevant delivery work

Stalled health platform

NHS DSPT work was delivered with the platform, not left as a separate post-build task.

Read the work →

Relevant delivery work

Compliance delivery story

DSPT evidence was tied to the service and its operating dependencies.

Read the work →

Keep the map connected

Cyber Essentials →DTAC →ISO 27001 →

Need this mapped to your system?

Start with the evidence your review needs.

Talk to us →