DSPT 2026-27 · Standard 7: Continuity Planning
Do you keep an up-to-date list of emergency contacts somewhere separate from your computers, like a printed copy?
Why it matters for your practice
If your IT systems go down, you can't access digital contact lists. Keep a printed copy of emergency contacts: your IT support company, the helpdesk for EMIS or SystmOne, ICB IG team, NHS England cyber security, your internet provider, key staff members' mobile numbers. Store it securely but make sure relevant staff know where it is.
Is it mandatory?
Yes. GP practices must meet 7.3.2 to reach "Standards Met" in the 2026-27 DSPT.
Official wording from NHS England
Assertion 7.3: You have the capability to enact your incident response plan, including effective limitation of impact on your essential service
Are all emergency contacts kept securely, separate from your computer, and are up-to-date?
Contacts are those needed to enact the business continuity plan that covers data and cyber security. The contacts include phone number as well as email addresses. It’s important to store your emergency contact list somewhere separate from your computer or IT system, such as having a hardcopy, so that you can access it if your systems are not available. Contacts should include your IT support company, IT systems suppliers, ICB/local authority commissioner(s), NCSC reporting line, and your Data Security and Protection Lead. Check if all contacts are up-to-date.
Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.
ClinicShield templates that help
- Business Continuity Plan
Ready-to-edit templates are included in paid plans.