4. Strengthening Assurance - Independent Assessment Guides 24-25 v7 for IT Suppliers, OES Independent providers and NHS Organisations
Guidance for DSPT independent assessment or audit providers, including auditors for IT Suppliers and OES Independent providers. A summary of Audit arrangements for NHS Trusts (Acute, Foundation, Ambulance and Mental Health), Integrated Care Boards, Commissioning Support Units and DHSC Arm’s Length Bodies with detailed guides to be launched shortly. The guidance is designed to be used by DSPT independent assessment providers, including internal auditors, when assessing DSPT submissions.
Update
These guides are updated to reflect the new Data Security and Protection Toolkit 2024-25 (version 7) standard.
-----------------------------------------------------------------------------------------------
These guides are valid for IT Suppliers and OES Independent providers until the DSP Toolkit deadline 30 June 2025:
Data Security and Protection (DSP) Toolkit Strengthening Assurance Framework 2024 -25 v0.1.pdf
Data Security and Protection (DSP) Toolkit Strengthening Assurance Summary of Guides 2024-25 0.1.pdf
DSP Toolkit Independent Assessment Report Template and Terms of Reference v1.1.pptx
This guide (more to follow in coming weeks) are valid for NHS Trusts, Arm's Length Bodies, Integrated Care Boards and COmmissioning Support Units until the DSP Toolkit deadline 30 June 2025: