DSPT 2026-27 · Standard 7: Continuity Planning
Do you have an up-to-date list of all hardware and software used in your practice?
Why it matters for your practice
You need a register listing all your digital equipment (computers, laptops, tablets, printers, routers, phones) and software — EMIS or SystmOne, Windows, Office and so on. This should be reviewed at least once a year. You can combine this with your Information Asset Register from question 1.1.2. Digital Care Hub has a template.
Is it mandatory?
Yes. GP practices must meet 7.1.1 to reach "Standards Met" in the 2026-27 DSPT.
Official wording from NHS England
Assertion 7.1: Organisations have a defined, planned and communicated response to data security incidents that impact sensitive information or key operational services
Do you have a digital asset register detailing your organisation's hardware and software, which is kept up to date?
This digital asset register is a list of the digital devices (hardware) and computer software your organisation uses. The register should have been reviewed at least once in the last twelve months. You can have a separate list of digital assets or combine it into one document with your Information Asset Register (see 1.1.2.) An example digital asset register is available at: Asset register (https://www.digitalcarehub.co.uk/resource/information-asset-register-template/)
Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.
ClinicShield templates that help
- Information & Digital Asset Register
Ready-to-edit templates are included in paid plans.