Skip to main content
Quick summary
  • Assuric tracks DSPT, the NHS’s annual data security self-assessment, as a framework.
  • DSPT updates yearly, and your workspace’s category decides which requirements apply.
  • You submit DSPT to NHS England through the DSPT portal, not through Assuric.

​
What DSPT is

The is a yearly requirement for any organisation handling NHS or social care data. You submit it yourself, to NHS England, through the DSPT portal.

​
How Assuric tracks it

In the sidebar, open Compliance → Frameworks, then the DSPT card.
  • Version and category: The card names the version, year and your organisation’s category, for example v9 (26/27) (Category 3 Organisation / Other). DSPT updates yearly and your workspace is assigned one category, which decides the requirements you get.
  • Requirements: The Requirements tab groups requirements under Requirement Categories, numbered from the 10 National Data Guardian data security standards (1 - Personal confidential data to 10 - Accountable suppliers). They’re separate from your organisation’s category.
  • Tasks: The Tasks tab groups work under Setup, Policies, People, Organisation, Security Controls and Audit & Certification.
  • Schedule and documents: The calendar button on the framework page opens Framework Schedule, where you set the Due Date and Recurrence (for DSPT, Annually). Docs opens your documents filtered to DSPT.

​
Complete the questionnaire

Assuric’s AI assistant, part of Ask Assuric, drafts DSPT questionnaire answers from your workspace documentation, with citations you check before submitting. Answer security questionnaires covers starting it, fixing the answers and copying them into the DSPT portal.

Frameworks: Overview

Where DSPT sits among the other frameworks.

Framework progress

How the Requirements/Tasks split works across every framework.