Data Security and Protection Toolkit Improvement plans (20th January 2021)

We have received a number of queries about how organisations can update their Improvement plans, especially where organisations are being impacted by COVID 19.

If you have completed all the actions on your Improvement plan, email the updated Improvement plan to cybersecurity@nhs.net. This should clearly show the current status of all the evidence items as being MET and the outstanding actions all complete. The email must include confirmation that the SIRO has confirmed that the outstanding actions are completed.

This can be done at any time once the outstanding actions have been completed. Once it has been received, it will be reviewed and, if satisfactory, the Status of the 19-20 DSP Toolkit will be amended to Standards met.

If you have not completed all the actions on your Improvement plan You should provide an update to your Improvement plan by 28th February 2021. This should be emailed to cybersecurity@nhs.net.

This must include updated positions on current status, outstanding actions, expected completion date and any additional notes for each evidence item on the improvement plan.

If the expected completion dates for any actions have changed. You should update your Improvement plan by 28th February 2021. This should be emailed to cybersecurity@nhs.net.  

Results, including details of any organisations not providing an update of their Improvement plan, will be shared with NHS England and NHS Improvement Digital Transformation Leads.

The Improvement plan template is available https://www.dsptoolkit.nhs.uk/News/Attachment/286