IT and Information Governance for GP Practices
GP practices carry a lot of responsibility without the resources of a large NHS organisation. We give practice managers and partners clear, independent oversight of IT, cyber security and information governance, so you know where you stand.
What GP Practices Need to Manage
- Data Security and Protection Toolkit (DSPT). Annual submissions, evidence gathering, action plans and compliance.
- Information governance. Policies, procedures, data protection processes, retention, access controls and records management.
- Cyber security. Multi-factor authentication, endpoint protection, patching, backups, phishing awareness and incident response.
- Supplier assurance. Checking that IT suppliers and systems meet appropriate security and data protection requirements.
- Digital systems. Clinical systems such as SystmOne and EMIS, cloud services, Microsoft 365, telephony and more.
- Business continuity. Keeping the practice running during IT outages or cyber incidents.
Where We Fit In
Many practices rely on the practice manager, an internal administrator or an external IT supplier to cover all of this. That can leave gaps in oversight, assurance and accountability. We are independent of your suppliers. We work alongside them and your team, check that the right things are in place, and tell you plainly what needs attention.
How We Can Help
Four clear services, so you can start small and build up. All prices exclude VAT.
Start here
DSPT Health Check
£350–£600 ex VAT
Fixed fee, subject to scope
A review of your current Data Security and Protection Toolkit submission and evidence, the gaps, and a clear improvement plan.
Review
Information Governance Review
£500–£900 ex VAT
Fixed fee, subject to scope
A review of your policies, processes, data protection arrangements and responsibilities, with practical recommendations.
Review
Cyber Security Review
£500–£900 ex VAT
Fixed fee, subject to scope
An assessment of multi-factor authentication, devices, patching, backups, access controls and how ready you are for an incident.
Ongoing support
Ongoing IG and IT Support
£250–£600/month ex VAT
Typical monthly retainer
Monthly support with compliance oversight, action tracking and advice, so nothing slips between annual submissions.
Prices are a guide and depend on the size of your practice and the scope of the work. We confirm a fixed price before we start. See also our data and information governance and cyber security support.
Frequently Asked Questions
How long does a DSPT Health Check take?
Most health checks take around one to two weeks, depending on how much evidence is ready and how quickly we can speak to the right people.
What does it cost?
The DSPT Health Check is £350 to £600, and the Information Governance and Cyber Security Reviews are £500 to £900 each. Ongoing IG and IT Support is £250 to £600 a month. All prices exclude VAT and depend on the size of your practice and the scope of the work.
What do you need from us?
A named contact, usually the practice manager, access to your current DSPT submission and policies, and a conversation with whoever looks after your IT. We never need access to patient records.
Do you replace our IT supplier?
No. We work alongside your existing IT supplier, check what is in place and help you ask the right questions. We are independent, so our advice is based on what is best for the practice.