DSPT Toolkit
for Care Providers

What does the DSPT ask care providers to do?

• Personal responsibilities, sensible password and device habits for every member of staff
• Staff management, onboarding, leavers, training records and acceptable use
• Data security, encryption, backups and incident response plans
• Network and computer security, patching, anti-malware and secure configurations
• Supplier assurance, checking the cyber posture of agencies, locums and software vendors
• Risk register and senior accountability, a named board-level owner for cyber

We translate each standard into one plain-English question, capture the evidence as you go and flag anything that's likely to fail before you submit.