DSPT 2026-27 · Standard 6: Responding to Incidents
Do all computers and devices in your practice have up-to-date antivirus software?
Why it matters for your practice
Every computer, laptop, and tablet in your practice needs antivirus/antimalware software that's kept up to date. This includes the server if you have one on-site. Windows Defender (built into Windows 10/11) counts if it's enabled and updating. Ask your IT support company to confirm this if you're unsure.
Is it mandatory?
Yes. GP practices must meet 6.2.1 to reach "Standards Met" in the 2026-27 DSPT.
Official wording from NHS England
Assertion 6.2: All user devices are subject to anti-virus protections while email services benefit from spam filtering and protection deployed at the corporate gateway
Do all the computers and other devices used across your organisation have antivirus/anti-malware software which is kept up to date?
This applies to all servers, desktop computers, laptop computers, and tablets. Note that antivirus software and antimalware software are the same thing - they both perform the same functions. You may need to ask your IT support company to assist with answering this question. If your organisation does not use any computers or other devices, then tick and write "Not applicable" in the comments box. Further information is available from Digital Care Hub (https://www.digitalcarehub.co.uk/data-protection-and-cyber-security/cyber-security/reduce-the-risk-and-impact-of-a-cyber-incident/have-up-to-date-antivirus-software).
Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.
ClinicShield templates that help
- Information Security Policy
Ready-to-edit templates are included in paid plans.