//CYBER SECURITY, DIGITAL HEALTH, MEDICAL DEVICE AND DEFENCE SECURITY BLOG
Subscribe for Updates
JOIN OUR MAILING LIST FOR THE LATEST POSTS, INSIGHTS, AND CYBERSECURITY GUIDANCE.
ARCHIVE
Craig Pepper
Does Your Organisation Need a...
Only suppliers that meet all three of NHS England's IT Supplier criteria need a DSPT independent audit: 50 or more ...
DSPT 2026-27: The 12...
What is the DSPT 2026-27 audit for IT suppliers? On 1 October 2026, NHS England published the mandatory audit scope for ...
DCC Levels 0–3 Requirements...
When preparing for the Defence Cyber Certification (DCC) as an industry partner for the UK Ministry of Defence (MOD), ...
Does DSPT Require Penetration...
What Every Organisation Needs to Know Under Data Security Standard 9 (IT Protection), assertion 9.2 requires an annual ...
CAF v4 in the DSPT: What NHS...
DSPT version 9 for 2026-27 is built on version 4.0 of the NCSC's Cyber Assessment Framework (CAF). But "aligned to CAF ...
What Is the EU Cyber...
The EU Cyber Resilience Act's 24-hour rule is a legal requirement, in force since 11 September 2026, for manufacturers ...
DSPT 2026-27 Is Live: What's...
The Data Security and Protection Toolkit for 2026-27 went live on 4 September 2026. Version 9 is now aligned to the ...
Tailored for Defence: Why...
Ask an AI assistant to write an Acceptable Use Policy, and it will produce something plausible-looking in seconds: ...
20