ARCHIVE
DSPT 9.5.11: Software...
Short answer: DSPT evidence item 9.5.11 is a new mandatory requirement for Category 2 IT suppliers in 2026-27. It ...
Cyber Essentials Plus and ISO...
Which of the 102 Category 2 Evidence Items You Can Skip Short answer: Category 2 IT suppliers must evidence 102 ...
DSPT 4.5.6 Explained
The New MFA and Identity Federation Requirement for IT Suppliers Short answer: Evidence item 4.5.6 is a new mandatory ...
Does Your Organisation Need a...
Only suppliers that meet all three of NHS England's IT Supplier criteria need a DSPT independent audit: 50 or more ...
DSPT 2026-27: The 12...
What is the DSPT 2026-27 audit for IT suppliers? On 1 October 2026, NHS England published the mandatory audit scope for ...
Does DSPT Require Penetration...
What Every Organisation Needs to Know Under Data Security Standard 9 (IT Protection), assertion 9.2 requires an annual ...
CAF v4 in the DSPT: What NHS...
DSPT version 9 for 2026-27 is built on version 4.0 of the NCSC's Cyber Assessment Framework (CAF). But "aligned to CAF ...
DSPT 2026-27 Is Live: What's...
The Data Security and Protection Toolkit for 2026-27 went live on 4 September 2026. Version 9 is now aligned to the ...