Log In or Register your organisation to access the Data Security and Protection Toolkit

Assertions and evidence items

For reference, the assertions and evidence items which constitute the Data Security and Protection Toolkit assessment are included in the attached excel file.


Organisation types are listed in a separate tab on the spreadsheet.


Where an evidence item is not applicable to an organisation type, the relevant cell is blank.


Version control:

V5.1 (4th May 2018) – updated to clarify that Cyber Essentials PLUS is the relevant standard to exempt a number of evidence items

Supporting Documents