Skip to main content

Part of Strengthening assurance – independent assessment: summary of guides

Appendices

Previous Chapter

Next steps – planning for your review

Current Chapter

Current chapter – Appendices

View all
Page contents

Appendix A - Organisational RACI

Appendix B – CAF-aligned DSPT Gantt chart

The Gantt chart (available to download below) provides an indicative timeline for the completion of the CAF-aligned DSPT, starting with the preparation of the assessment, and ending with post-assessment activities.

Collation of the documents and discussions around the organisation’s position for each outcome should take place year-round and are therefore listed as 'Prior to week 1' in the chart.

Submitting the final report to NHSE must be done before the 30 June deadline, but this may be farther away than week 9 if the organisation has undertaken their CAF-aligned DSPT early in the year.

Last edited: 16 September 2025 10:30 am

Chapters

  1. Strengthening assurance – independent assessment: summary of guides
  2. Introduction
  3. Cyber Assessment Framework (CAF)-aligned Data Security and Protection Toolkit (DSPT)
  4. Overview of the independent assessment framework and guide
  5. Next steps – planning for your review
  6. Appendices