How often do we need to complete the DSPT?

Things change rapidly so you need to complete the DSPT and publish the standard that you reach, at least once every year. We strongly advise you to keep your DSPT live and up to date.  Changes to services, systems and staff can all impact on your data and cyber security policies, procedures and practices.

If you have already completed your DSPT, and you’ve introduced significant changes, you can quickly update the relevant sections of the Toolkit and republish. You don’t have to start from scratch. Find guidance and support on completing your DSPT.