4. Strengthening Assurance - Independent Assessment Guides 25-26 v8 for IT Suppliers, Genomics organisations, OES Independent providers and NHS Organisations
Guidance for DSPT independent assessment or audit providers, including auditors for IT Suppliers, OES Independent providers, Genomics organisations, NHS Trusts (Acute, Foundation, Ambulance and Mental Health), Integrated Care Boards, Commissioning Support Units and DHSC Arm’s Length Bodies. The guidance is designed to be used by DSPT independent assessment providers, including internal auditors, when assessing DSPT submissions.
Update
These guides are updated to reflect the new Data Security and Protection Toolkit 2025-26 (version 8) standard.
-----------------------------------------------------------------------------------------------
These guides are valid for IT Suppliers until the DSP Toolkit deadline 30 June 2026:
Data Security and Protection (DSP) Toolkit Strengthening Assurance Framework 2025 -26
Data Security and Protection (DSP) Toolkit Strengthening Assurance Guide 2025-26 (smaller of guides)
Data Security and Protection (DSP) Toolkit Strengthening Assurance Summary of Guides 2025-26
DSP Toolkit Independent Assessment Report Template and Terms of Reference v1.1
These guides are valid for NHS Trusts, Arm's Length Bodies, Integrated Care Boards, Commissioning Support Units, Independent providers who are designated Operators of Essential Services (OES) and Genomics organisations (as nominated by the Department of Health and Social Care) until the DSP Toolkit deadline 30 June 2026:
Strengthening assurance – independent assessment: summary of guides
Guide for CAF-aligned DSPT independent assessors
- Appendix A - Glossary of terms
- Appendix B - Independent assessor ToR template
- Appendix C - CAF DSPT report template
DSPT Toolkit - CAF Independent Assessment Framework Objective A
DSPT Toolkit - CAF Independent Assessment Framework Objective B
DSPT Toolkit - CAF Independent Assessment Framework Objective C
DSPT Toolkit - CAF Independent Assessment Framework Objective D
DSPT Toolkit - CAF Independent Assessment Framework Objective E
