30-second briefing
Test the process staff actually use
- The DSPT is a published self-assessment mechanism for data security and protection.
- DHSC’s internet guidance places connectivity within the care service’s operating requirements.
- A rehearsal is a local management exercise, not a certification or proof of compliance.
Digital records support coordination only while the right people can access and interpret them. A service needs a plan for what happens when that access is interrupted and for restoring a trustworthy record afterwards.
The Data Security and Protection Toolkit provides a recognised assurance process. Care Circle’s follow-up question is operational: can staff explain and use the interruption arrangements on an ordinary shift?
Choose a realistic interruption
Use a planned discussion or safely designed exercise rather than creating a live outage. Select a relevant scenario, such as unavailable connectivity or loss of access to a critical platform.
The appropriate care and technical leads should agree the scope and safeguards. The exercise should not compromise real care or expose personal information. It is intended to reveal dependencies and unclear decisions.
Follow the information needed for care
Ask what essential information staff need, how approved alternatives are accessed and who supports a decision where information is missing. Consider the staff actually on duty rather than only the people who wrote the plan.
Avoid assuming that a printed file, device or backup exists in the right place and remains current. Test the arrangements the service has chosen, with appropriate controls over information.
Recovery needs its own plan
When access returns, records created during the interruption need to be reconciled through an agreed process. Responsibility, chronology and any unresolved discrepancy should be clear.
A technically restored system does not by itself establish that the care record is complete. The provider needs a usable way to recover both the service and the information created while it was unavailable.
Turn findings into ownership
Record what the exercise revealed, the action required and the person responsible. Revisit material changes rather than filing the exercise as a completed annual event.
Ask relevant suppliers what support is available during an incident and how the provider will receive updates. Contractual response arrangements need to fit the service’s actual dependency.
Questions leaders should ask now
- 01
Which service depends on this system?Describe the care and information functions affected.
- 02
Can the shift team use the alternative?Test real roles, access and current information.
- 03
How do we rebuild the record?Agree reconciliation and discrepancy handling.
- 04
Who closes the gaps?Retain an action record and retest relevant changes.
The Care Circle view
Assurance becomes useful when it can be rehearsed
A provider’s plan should be understandable to the staff expected to use it. A measured rehearsal makes dependencies visible and creates specific improvements.
That is a practical continuation of our earlier digital-assurance coverage, linking policy evidence with the delivery of care.
Continuing coverage
Follow the question into the later editions.
A complaint closes only when the learning reaches the person · 10 October 2026
The medicines handover needs a resolved answer, not another list · 10 October 2026
How the story develops
Continue from the earlier evidence.
This feature develops a continuing leadership question. Earlier publication dates and evidence periods remain visible.
Beyond DSPT: can you prove your cyber controls actually work? · 9 August 2026
Your supplier is part of your attack surface · 7 August 2026
The evidence reset: follow an issue until care changes · 4 August 2026
Who still has access when the IT supplier changes? · 9 October 2026
July insurance changes: why care providers still need clear risk and claims evidence · 28 July 2026
Cyber insurance and care continuity: who does what when systems fail? · 13 July 2026
Develop the analysis
Read the connected flagship reports.
Workforce & delivery: turning sector improvement into dependable care
Digital continuity: can the care service depend on its systems?
Operational assurance: suppliers, equipment and resident voice
Sources, method & limitations
How to read this analysis
Care Circle examined the primary publications linked below on 9 October 2026. Statements about official policy or guidance are attributed to their source. Operational examples, suggested questions and the Care Circle view are editorial analysis, not findings from a provider survey.
- No provider-specific assessment, eligibility decision or prediction of regulatory outcomes is made.
- Source publication dates and this edition’s review date are separate. Local arrangements and later updates may change the position.
- Suggested management actions support discussion with appropriately qualified advisers; they do not replace individual care planning or professional judgement.