4. Strengthening Assurance - Independent Assessment Guides 24-25 v7 for IT Suppliers, OES Independent providers and NHS Organisations
Guidance for DSPT independent assessment or audit providers, including auditors for IT Suppliers and OES Independent providers. A summary of Audit arrangements for NHS Trusts (Acute, Foundation, Ambulance and Mental Health), Integrated Care Boards, Commissioning Support Units and DHSC Arm’s Length Bodies with detailed guides to be launched shortly. The guidance is designed to be used by DSPT independent assessment providers, including internal auditors, when assessing DSPT submissions.
Update
These guides are updated to reflect the new Data Security and Protection Toolkit 2024-25 (version 7) standard.
-----------------------------------------------------------------------------------------------
These guides are valid for IT Suppliers and OES Independent providers until the DSP Toolkit deadline 30 June 2025:
Data Security and Protection (DSP) Toolkit Strengthening Assurance Framework v1.26 2024 -25 .pdf
DSP Toolkit Independent Assessment Report Template and Terms of Reference v1.1
This guide (more to follow in coming weeks) is valid for NHS Trusts, Arm's Length Bodies, Integrated Care Boards and Commissioning Support Units until the DSP Toolkit deadline 30 June 2025: