DSPT 2026-27 · Standard 7: Continuity Planning

Evidence item 7.1.5Optional

Does your asset register prioritise items by importance and list their dependencies (power, internet, etc.)?

Why it matters for your practice

Your digital asset register (from 7.1.1) should indicate which systems are most critical to your practice — e.g. your clinical system is more critical than the printer — and note what each depends on (internet connection, power supply, specific server, etc.). This helps you prioritise during a disaster recovery.

Is it mandatory?

No. 7.1.5 is optional for GP practices in the 2026-27 DSPT, but answering it shows good practice.

Official wording from NHS England

Assertion 7.1: Organisations have a defined, planned and communicated response to data security incidents that impact sensitive information or key operational services

Your asset register prioritises assets according to their organisational importance, and includes dependencies (such as power, cooling, data, people etc.) that support the assets.

Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.

ClinicShield templates that help

  • Information & Digital Asset Register

Ready-to-edit templates are included in paid plans.

Track 7.1.5 and every other DSPT item

ClinicShield turns each DSPT question into plain English, shows your traffic-light status by standard and builds an action plan for anything you haven't met yet. Free forever plan, no card needed.

Start your free assessment

This guide covers the requirements for GP practices (Category 4). ClinicShield is a preparation and guidance tool. You still publish your submission on the official DSPT website. We're not affiliated with NHS England and can't guarantee an outcome. Guidance only, not professional advice.