NHS DSPT 2026–27 (v9) readiness, assessment & assurance support

NHS Data Security and Protection Toolkit — annual self-assessment for healthcare organisations.

Open TAP assessment Start free trial Talk to TASK

TAP provides readiness and assurance workflows. It does not itself issue statutory certification, regulatory approval, an audit opinion or a SOC report.

Jurisdiction / reach

England health and social care / NHS-connected organisations

TAP catalogue tier

Tier 2

Indicative assessment time

60 minutes

Assessment model

Self-service workflow available

What this service covers

A structured readiness view of NHS DSPT 2026–27

TAP combines the framework-specific assessment with governed gap, remediation, evidence and reporting workflows. The exact assessment content remains pinned to its governed TAP release so historical results are reproducible.

Data-security governance and accountability

Asset, identity and access-management practices

Protective and detective security controls

Incident response, continuity and recovery

Supplier assurance and evidence management

Commonly relevant sectors

Healthcare

Authoritative reference

Data Security and Protection Toolkit 2026-27 version 9

Source authority

NHS England / Data Security and Protection Toolkit

Source status

Current source differs from pinned catalogue label

TAP content release

TAP-ASSESSMENT-LIBRARY-2026.09-R2

Open authoritative source

External standards and regulations can change independently of TAP. TAP keeps the assessment release and the current external-source reference visibly separate so a source update does not silently rewrite historical assessment evidence.

TAP assessment workflow

From framework scope to evidence-backed remediation

1. Scope

Confirm the relevant framework, organisational boundary, responsibilities and evidence owners before assessment.

2. Assess

Complete the governed TAP assessment against the framework-specific question set pinned to the active TAP content release.

3. Identify gaps

Record control gaps, severity, recommendations and supporting evidence without treating a readiness score as certification.

4. Remediate

Assign owners, due dates and remediation actions, then maintain evidence in the governed workspace.

5. Review & report

Use available consultant review and governed reporting features where the selected plan and assessment state permit them.

Framework-specific TAP assessment

Open the internal framework workspace to see the governed question domains, existing assessment state and available start/continue actions for your organisation.

Open assessment workspace

Relevant links