Help shape future cyber assessment for Market Oversight Providers
What is changing
The way that some adult social care providers demonstrate their approach to cyber security and information governance is changing. Over the next 12 months, organisations operating under the CQC Market Oversight Scheme will move towards a separate category on the Data Security and Protection Toolkit (DSPT) and, in time, a CAF-based assessment aligned with the National Cyber Security Centre’s Cyber Assessment Framework.
This is part of the wider direction being taken by the Department of Health and Social Care and national partners to support a more outcomes-focused approach to cyber resilience. It will give organisations greater flexibility to show how they manage risk, protect information, detect incidents, respond effectively, and use information appropriately.
Who is leading this work
DHSC is driving this work, with Digital Care Hub supporting the development of practical guidance, resources and opportunities for providers to share their experience.
How Digital Care Hub can support
Digital Care Hub runs Better Security, Better Care – a government-funded support programme for adult social care on the DSPT, data and cyber security.
Our support is free at the point of access, and our role is to work alongside providers in a practical and supportive way. We are not an audit body, and involvement in this work would not be about checking or assessing individual organisations.
How you can get involved
We are looking for Market Oversight Providers of any size who would be willing to work with us during this development phase and help shape the support that will be needed as we prepare for the future move to a CAF-based assessment.
This could include joining Teams meetings or phone calls, hosting or attending site visits where helpful, testing our thinking, shaping the resources and guidance we develop, and sharing feedback on what would make the transition clearer and more manageable.
This process will also help us identify any areas where providers may need further clarification or support, so we can share practical feedback with DHSC as the future CAF-based assessment is developed.
Your involvement would help ensure the support available reflects the reality of operating within the Market Oversight Scheme and builds on the good practice already happening across the sector.
What you need to do now
In the meantime, please continue to complete and publish your DSPT as normal. DSPT remains the current assessment route for adult social care providers while we prepare for the future CAF-based approach.
If your organisation would like to be involved or you would like to find out more, please complete the Contact us form.
We would really welcome your input and look forward to working with providers to shape this together.
