DSPT Guidance updated to include Specimen Supporting Statements for NHS Trusts, ICBs, CSUs and ALBs (27 January 2025)

DSPT Guidance has recently been updated to ensure consistency with Audit guidance and to include some specimen supporting statements to help organisations complete their DSPT assessment.

DSPT Guidance has recently been updated to ensure consistency with Audit guidance and to include some specimen supporting statements for NHS Trusts, ICBs, CSUs and ALBs


Updates to guidance to ensure consistency with Auditors guide


Following the work to develop and publish the DSPT Auditor guides for CAF Cyber Assessment Framework (CAF)-aligned Data Security and Protection Toolkit (DSPT) this has led to some changes to the guidance related DSPT outcomes. This has led to an update in the Supporting Evidence section to support consistency between the guides for organisations and guides for auditors.


Specimen Supporting Statements


Two specimen supporting statements have been produced to support organisations completing the DSPT.
These are examples and you do not have to use them and are free to use an approach that suits your environment.
The specimen supporting statements are available in the Overview section of the guidance in the 'How to approach it' page (https://digital.nhs.uk/cyber-and-data-security/guidance-and-assurance/2024-25-caf-aligned-dspt-guidance/overview/approach).