Practical, plain-English guidance on cyber security and data protection compliance for dental practices, care providers and regulated small organisations.
Who needs DSPT staff training, the free national e-learning, local alternatives, how often to train and a simple log to record it before the 30 June 2027 deadline.
Read the guide CharitiesThe latest government figures on charity cyber attacks, the five NCSC basics to sort first, who should own security, volunteers and where Cyber Essentials fits.
Read the guide UK GDPRWhen a breach must be reported, when the 72-hour clock starts, the ICO's seven first steps, when to tell the people affected and what to keep in your breach log.
Read the guide Security alertThe critical PHP issue the NCSC flagged on 21 October 2026, in plain English: who is affected, a 7-step checklist and what to ask your web host and IT provider.
Read the guide Security alertSeven questions to send your web host or IT provider about CVE-2026-109618 and CVE-2026-109619, with written confirmation for your DSPT evidence file.
Get the email DSPT supportDSPT support for NHS dental practices: free external audit, full audit from £950, standards readiness from £1,500 with support through to the 30 June 2027 submission.
See the service DSPT supportHow care homes and home care providers can reach Standards Met by 30 June 2027. Free external audit, full audit from £950, standards readiness from £1,500.
See the service Cyber security auditAn independent cyber security audit for UK dental practices, mapped to the NHS DSPT, Cyber Essentials and UK GDPR. Free external audit; full audit from £950.
See the service CostsWhat a cyber security audit costs for a small UK organisation: free external audit, full audit from £950, standards readiness from £1,500, plus the official Cyber Essentials fees.
See the costs Free toolA free DMARC and email security check for UK dental practices, care providers and small organisations. See in seconds if someone could send email pretending to be you.
Run the check PECR and emailWho can use the new charity soft opt-in, the four conditions the ICO sets, which messages it covers, and how a small charity can set up its forms and emails properly.
Read the guide Cyber EssentialsA plain-English checklist for the five Cyber Essentials controls, with the April 2026 rules on 14-day patching, passwords and MFA for every cloud service.
Read the guide UK GDPRWho has to pay the ICO fee, the 2026 tiers from £52, the exemptions and how to pay or renew, for dental practices, care providers and small charities.
Read the guide DSPTWhen is the 2026-27 DSPT deadline? What is confirmed, why to plan for 30 June 2027, and a month-by-month plan for dental practices and care providers.
Read the guide Care providersWhat the DSPT means for care homes and home care providers in 2026-27: who needs it, the 26 and 45 question levels, what to have ready, common gaps and free help.
Read the guide DSPTWhat each DSPT status means, what it takes to reach Standards Met, when Approaching Standards is allowed, how to get Standards Exceeded and how to check any organisation.
Read the guide BenchmarkWe checked 243 dental practice websites across Yorkshire and the Humber. Only 9% tell receivers to block fake emails. What that means for patients and the DSPT.
Read the guide Care providers73% of care homes and 83% of home care agencies we checked could be impersonated by email. How fake fee emails reach families, and the free fix.
Read the guide Email securitySPF, DKIM and DMARC explained without jargon, with the steps for Microsoft 365 and Google Workspace and a safe route from monitor to reject.
Read the guide FraudThe "we have changed our bank details" email, why an unprotected domain makes it convincing, and the simple process and technical fixes that stop it.
Read the guide Email deliveryGmail, Yahoo and Microsoft have tightened their rules. Why genuine practice and care emails land in spam, and the three records that fix it.
Read the guide PECRWhen you need consent for marketing emails and texts, the two soft opt-ins including the new one for charities, the 2026 cookie exceptions and the higher fines.
Read the guide UK GDPRThe one-month deadline, when you can charge or extend, ID checks, what to send back and a simple seven-step process a small team can follow every time.
Read the guide Cyber EssentialsWhat changed in April 2026, from MFA on every cloud service to 14-day patching as an automatic fail, and what it means for dental practices, care providers and charities.
Read the guide DSPTWhat the version 9 release notes say, what they mean for dental practices, care providers and small charities, the deadline position and what to do now.
Read the guide Cyber EssentialsWhether a dental practice needs Cyber Essentials, how it differs from the DSPT, where the two overlap, and a practical order to tackle them in.
Read the guide DSPTWhen a charity needs the DSPT, what Cyber Essentials covers, where the two overlap, and a practical order for small charities working with the NHS.
Read the guide DSPTWhat the DSPT and Cyber Essentials each ask of a care provider in England, where they overlap, and a sensible order to tackle them in for 2026-27.
Read the guide DSPTRegister, name the people responsible, gather your policies, train staff, check the technical controls and publish before the deadline. A practical walk-through for dental practices, care providers and other small organisations.
Read the guide Cyber EssentialsBoth certify against the same five controls. The difference is how you are assessed. Here is how the self-assessment and the hands-on audit compare, and how to choose between them.
Read the guide Cyber EssentialsWhat Cyber Essentials actually covers, the five technical controls assessors check, and how it fits alongside the DSPT for regulated small organisations.
Read the guide Cyber EssentialsHonest cost breakdown for Cyber Essentials certification in 2026, including published fees, remediation costs, consultant options, and realistic total-cost estimates for a sole trader and a team of ten.
Read the guide Security basicsSix-step MFA rollout plan for teams of two to fifty. Which factor types to use where, how to avoid locking yourself out, and how to handle the exceptions that always come up.
Read the guide Cyber EssentialsPlain-English guide to Cyber Essentials certification for sole traders and one-person limited companies. The five controls, three routes, 2026 costs, and the common first-attempt mistakes.
Read the guide DSPTWhat the Data Security and Protection Toolkit asks for, what changed in version 8, and the evidence a dental practice needs before the 30 June deadline.
Read the guide Free toolRun our free instant check on your SPF, DKIM and DMARC records. Plain-English results in a few seconds, and nothing touches your systems.
Run the check