DSPT 2026-27 · Standard 8: Unsupported Systems

Evidence item 8.3.8Optional

Is your practice registered for the NCSC Early Warning service?

Why it matters for your practice

The National Cyber Security Centre (NCSC) runs a free Early Warning service that alerts you if they detect malicious activity targeting your network. Registration is free and straightforward at https://www.ncsc.gov.uk/information/early-warning-service. The toolkit has asked GP practices about this since 2025-26.

Is it mandatory?

No. 8.3.8 is optional for GP practices in the 2026-27 DSPT, but answering it shows good practice.

Official wording from NHS England

Assertion 8.3: Supported systems are kept up-to-date with the latest security patches

Your organisation is registered for and actively using the NCSC early warning service.

The NCSC early warning service (https://www.ncsc.gov.uk/information/early-warning-service) helps organisations investigate cyber attacks on their network by notifying them of malicious activity that has been detected in information feeds.

Official wording © NHS England, from the DSPT 2026-27 (v9) requirements. Always check the live Data Security and Protection Toolkit before you submit.

Track 8.3.8 and every other DSPT item

ClinicShield turns each DSPT question into plain English, shows your traffic-light status by standard and builds an action plan for anything you haven't met yet. Free forever plan, no card needed.

Start your free assessment

This guide covers the requirements for GP practices (Category 4). ClinicShield is a preparation and guidance tool. You still publish your submission on the official DSPT website. We're not affiliated with NHS England and can't guarantee an outcome. Guidance only, not professional advice.