DSPT 2026-27 · Standard 8: Unsupported Systems

Evidence item 8.1.4Optional

Are all your IT systems and software still supported by the manufacturer, or are any risks from unsupported systems being managed?

Why it matters for your practice

Check whether all your software is still receiving security updates. Unsupported software includes Windows XP, Vista, 7, 8.1, and Windows Server 2008. Windows 10 support ended in October 2025, so any Windows 10 PCs need upgrading to Windows 11 or covering by Extended Security Updates. Also check your clinical system version, printers, routers, etc. Ask your IT support company to confirm everything is supported.

Is it mandatory?

No. 8.1.4 is optional for GP practices in the 2026-27 DSPT, but answering it shows good practice.

Official wording from NHS England

Assertion 8.1: All software and hardware has been surveyed to understand if it is supported and up to date

Are all the IT systems and the software used in your organisation still supported by the manufacturer or the risks are understood and managed?

Systems and software that are no longer supported by the manufacturer can be unsafe as they are no longer being updated to protect against viruses for example. You may need to ask your IT supplier to assist with answering this question. Examples of unsupported software include: Windows XP, Windows Vista, Windows 7, Windows 8.1, Java or Windows Server 2008. Windows 11 is supported and is the most up to date version of Windows. This question also applies to software systems such as rostering, care planning or electronic medicine administration record (MAR) charts for example. If your organisation does not use any IT systems or software, then tick and write "Not applicable" in the comments box. For guidance (including information on how to check which software versions you have), see Digital Care Hub (https://www.digitalcarehub.co.uk/data-security-protecting-my-information/cyber-security/install-the-latest-software-updates).

Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.

ClinicShield templates that help

  • Information & Digital Asset Register

Ready-to-edit templates are included in paid plans.

Track 8.1.4 and every other DSPT item

ClinicShield turns each DSPT question into plain English, shows your traffic-light status by standard and builds an action plan for anything you haven't met yet. Free forever plan, no card needed.

Start your free assessment

This guide covers the requirements for GP practices (Category 4). ClinicShield is a preparation and guidance tool. You still publish your submission on the official DSPT website. We're not affiliated with NHS England and can't guarantee an outcome. Guidance only, not professional advice.