Blog & Articles NHS DSPT Penetration Testing: What Suppliers Must Have in Place by Rebecca Sutton September 7, 2026 by Rebecca Sutton September 7, 2026 The NHS Data Security and Protection Toolkit now expects independent, evidenced penetration testing rather than a self-declared tick box. Here’s who it applies to and what a compliant report needs. FacebookTwitterLinkedinEmail