DSPT 2026-27 · Standard 8: Unsupported Systems

Evidence item 8.3.1Mandatory

How does your practice ensure software updates and security patches are installed promptly?

Why it matters for your practice

You need a strategy for keeping software up to date — Windows updates, antivirus definitions, clinical system updates, browser updates, etc. Many GP practices rely on their IT support company for this. Describe your approach: Is Windows Update set to automatic? Does your IT company push updates remotely? How quickly are critical security patches applied?

Is it mandatory?

Yes. GP practices must meet 8.3.1 to reach "Standards Met" in the 2026-27 DSPT.

Official wording from NHS England

Assertion 8.3: Supported systems are kept up-to-date with the latest security patches

How do you make sure that the latest software updates are downloaded and installed promptly?

This is your strategy for system updates. You may need your IT supplier/s to assist with this.

Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.

ClinicShield templates that help

  • Information Security Policy

Ready-to-edit templates are included in paid plans.

Track 8.3.1 and every other DSPT item

ClinicShield turns each DSPT question into plain English, shows your traffic-light status by standard and builds an action plan for anything you haven't met yet. Free forever plan, no card needed.

Start your free assessment

This guide covers the requirements for GP practices (Category 4). ClinicShield is a preparation and guidance tool. You still publish your submission on the official DSPT website. We're not affiliated with NHS England and can't guarantee an outcome. Guidance only, not professional advice.