Prepare for the NHS Data Security and Protection Toolkit

We help organisations understand their current position, organise relevant evidence, and identify practical work needed before a toolkit submission.

What the assessment can cover

The assessment is shaped around your organisation, the toolkit requirements that apply, and the evidence already available.

Current positionReview completed responses, known gaps, previous submissions, and the people responsible for each area.
Policies and evidenceIdentify where supporting documents, records, approvals, or operational evidence are missing or out of date.
Technology controlsConsider relevant security, access, device, backup, and information-handling arrangements against the evidence required.
People and responsibilitiesClarify ownership, training, incident processes, and the practical work needed from different parts of the organisation.
Gap prioritiesSeparate urgent submission blockers from improvements that can be planned and completed in a controlled order.
Submission readinessHelp your team understand what is ready, what remains incomplete, and what evidence should be retained.

Suitable for organisations preparing a first submission, recovering an incomplete evidence position, or wanting a clearer plan before the deadline.

Nothing begins until the scope, information required, responsibilities, output, and cost are clear.

We agree the organisation in scope, current submission position, available evidence, responsibilities, cost, and assessment boundaries.

We work through the agreed requirements and identify where claims need stronger support or further action.

You receive prioritised gaps and clear next steps. Your organisation remains responsible for approving and submitting its declaration.

Tell us what you need to understand and we will confirm a sensible scope before proposing any work.

Talk to us