Assertions and Evidence items for the Data Security and Protection Toolkit 2022-23 (12 December 2022)
Key facts and assertions and evidence items for the Data Security and Protection Toolkit 2022-23 (version 5)
The Assertions and Evidence items for the 2022-23 Data Security and Protection Toolkit have now been agreed.
The deadline for the Data Security and Protection Toolkit is 30th June 2023.
A baseline publication by 28 February 2023 is required from NHS Trusts, ALBs, CSUs and ICBs.
NHS Trusts, ALBs, CSUs and ICBs are all classed as Category one organisations for the DSP Toolkit.
The work to incorporate the Assertions and Evidence items into the Data Security and Protection Toolkit with the updated assurance framework (audit guide) and Big Picture Guides is in progress.
Change control
12 December 2022 - Tooltips have been updated for five evidence items (1.3.11, 8.3.7, 8.4.2, 9.3.1 and 9.5.8.)
8 August 2022 - mandatory status of three items on the spreadsheet has been updated for category 1 organisations. See change control tab for more details
6 September 2022 - wording of evidence item 3.2.1 (95% staff training) has been updated to allow calculation over the preceding 12 months (previously: "since 1st July 2022").
