NHS DSPT Readiness Support

Free DSPT readiness checker

Find out in an instant if you need an audit and where your security posture stands

Answer seven short steps about your organisation and controls. You’ll get an instant verdict on whether an independent DSPT audit applies to you, plus a security score and the gaps to close before you submit.

Get my security score Takes about 3 minutes

Audit verdict

Find out straight away whether your organisation needs an independent DSPT audit this year.

Security score

See your security posture as a score out of 100, broken down across governance, data protection, cyber controls and incident response.

Your top priorities

Get the three gaps to fix first, so your DSPT submission and audit go smoothly.

WIN MORE WORK WITH THE NHS

Get Audit-Ready Before 30 June

Most suppliers need three to six months to prepare for their DSPT submission. We show you exactly where you stand against the 2026-27 assertions, what evidence is missing, and what to fix first.

Gap Assessment

Your position against every 2026-27 assertion and evidence item that applies to you, in one clear report.

Testing & Certification

CREST penetration testing for assertion 9.2 and Cyber Essentials Plus, delivered by the same team.

Ready to Get Started?

Join the digital health companies preparing their NHS DSPT with Periculo.

Gap Assessment
Evidence Pack
Prioritised Remediation Plan

Testimonials

“Periculo assisted with our DSPT audit requirements. They were able to quickly understand our needs, the proposal met the brief and a detailed project plan was produced.

The process was well supported by the team and we gained a successful outcome.”

MIKE // MULTI-HEALTH SYSTEMS

“We had a great experience working with Periculo for our Cyber Essentials Plus certification. From the very beginning, their team was incredibly responsive, supportive, and approachable, which made the preparation phase smooth and efficient.

They were always available to answer our questions, clarify requirements, and help us feel fully prepared before the audit.

When it came time for the actual audit, the process was handled with impressive professionalism and thoroughness, giving us full confidence in their assessment.

Highly recommended for any organization looking for a dependable and knowledgeable partner for cybersecurity certifications.”

NASSOS KATSAMANIS // AUXILIS.AI

Why Choose Periculo For DSPT Readiness?

Enhancing Reputation

Build trust with NHS and healthcare partners
Demonstrate commitment to data protection
Enhance credibility in digital health sector
Meet regulatory compliance requirements

Gain Advantage in Tendering

Access NHS procurement opportunities
Meet mandatory tender requirements
Competitive advantage over suppliers without a Standards Met DSPT
Faster contract approval processes

What Our DSPT Readiness Support Covers

Gap Assessment

Your current position against every 2026-27 assertion and evidence item that applies to your organisation.

Evidence Pack

Your evidence organised and mapped to each item, so nothing is missing on submission day.

Remediation Plan

A prioritised list of what to fix first, who owns it, and how to evidence it.

Penetration Testing

An annual CREST penetration test, vulnerability scan and retest of critical and high findings for assertion 9.2.

Cyber Essentials Plus

Certification from an IASME-licensed Certification Body that supports a meaningful share of your DSPT evidence.

Pre-Submission Review

A final check of your submission before you submit or go into your independent audit.

FAQ’s

What is NHS DSPT readiness support?

Help to prepare your Data Security and Protection Toolkit submission before you submit or go into your independent audit: a gap assessment against the assertions that apply to you, evidence preparation and remediation guidance.

How long does DSPT preparation take?

Most suppliers need three to six months to prepare. Starting early in 2027 leaves time to close gaps and gather evidence before the 30 June 2027 deadline.

Do I need an independent DSPT audit?

Only if you are a Category 2 IT supplier: you supply digital goods or services to the NHS or care sector, have 50+ staff and £10m+ annual turnover. Smaller suppliers self-assess. Check whether you need an audit.

Does Cyber Essentials Plus help with DSPT?

Yes. Cyber Essentials Plus maps to a meaningful share of the DSPT evidence, but it does not replace the annual penetration test required by assertion 9.2.

Can you carry out the penetration test for assertion 9.2?

Yes. Our CREST-accredited team carries out the annual penetration test, vulnerability scan and retest of critical and high findings that assertion 9.2 asks you to evidence.

When is the DSPT 2026-27 deadline?

30 June 2027.