4. Strengthening Assurance - Independent Assessment Guides 24-25 v7 for IT Suppliers, OES Independent providers and NHS Organisations
Guidance for DSPT independent assessment or audit providers, including auditors for IT Suppliers, OES Independent providers, NHS Trusts (Acute, Foundation, Ambulance and Mental Health), Integrated Care Boards, Commissioning Support Units and DHSC Arm’s Length Bodies. The guidance is designed to be used by DSPT independent assessment providers, including internal auditors, when assessing DSPT submissions.
Update
These guides are updated to reflect the new Data Security and Protection Toolkit 2024-25 (version 7) standard.
-----------------------------------------------------------------------------------------------
These guides are valid for IT Suppliers and OES Independent providers until the DSP Toolkit deadline 30 June 2025:
Data Security and Protection (DSP) Toolkit Strengthening Assurance Framework v1.26 2024 -25 .pdf
DSP Toolkit Independent Assessment Report Template and Terms of Reference v1.1
These guides are valid for NHS Trusts, Arm's Length Bodies, Integrated Care Boards and Commissioning Support Units until the DSP Toolkit deadline 30 June 2025:
DSP Toolkit - CAF Summary Audit Guide v7 24-25 v1.0
DSPT Toolkit - CAF Independent Assessment Framework Objective A
DSPT Toolkit - CAF Independent Assessment Framework Objective B
DSPT Toolkit - CAF Independent Assessment Framework Objective C
DSPT Toolkit - CAF Independent Assessment Framework Objective D
DSPT Toolkit - CAF Independent Assessment Framework Objective E
