// Healthcare
NHS Data Security and Protection Toolkit Compliance Software
UK health and care data security standards (the 10 National Data Guardian standards).
Framework at a glance
Short name
NHS DSPT
Version
2024
Category
Healthcare
Controls
33
What NHS DSPT covers
33 controls across 3 domains — every one tracked, owned and evidenced in Cyber Horizon.
Leadership Obligation 1: People
10 controls- 1.1 Senior Ownership of Data Security
- 1.2 Data Security and Protection Policies
- 1.3 Information Assets and Data Flows Recorded
- 1.4 Lawful Basis and Transparency
- 2.1 Staff Responsibilities and Accountability
Leadership Obligation 2: Process
10 controls- 4.1 Least-Privilege Access to PCD
- 4.2 Timely Removal of Access
- 4.3 Attributable Access
- 4.4 Control of Privileged Access
- 5.1 Periodic Review of Processes
Leadership Obligation 3: Technology
13 controls- 7.1 Business Continuity Plan
- 7.2 Testing of Continuity Plans
- 7.3 Backup and Recovery
- 8.1 No Unsupported Systems
- 8.2 Hardware and Software Register
How Cyber Horizon automates NHS DSPT
Every NHS DSPT control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is NHS Data Security and Protection Toolkit?
UK health and care data security standards (the 10 National Data Guardian standards).
How many controls does NHS Data Security and Protection Toolkit have?
NHS Data Security and Protection Toolkit (2024) has 33 controls in Cyber Horizon's catalogue, organised across 3 domains.
How does Cyber Horizon help with NHS Data Security and Protection Toolkit?
Cyber Horizon maps NHS Data Security and Protection Toolkit into a shared control library alongside every other framework you run, so evidence collected once counts towards NHS DSPT and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Healthcare frameworks
See NHS DSPT mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of NHS DSPT in Cyber Horizon.