The data security protection toolkit (DSPT) was deployed within the NHS services to ensure a level playing field for security posture throughout GP’s, pharmacies, hospitals and services. The requirements are far reaching from policy and procedure through to advanced threat protection, and are in line with the National Data Guardians ten data security standards. By publishing the organisations performance against these standards ensures personal information is handled correctly, but it also prevents against future breaches and assists in reporting on any that occur. 

By utilising the universal indexing functionality of Splunk and the extensive search, Splunk is able to give a deeper insight into the infrastructure and security status. When approaching most NHS organisations, we often found that once we started discussing security posture, the DSPT report would be a main talking point, and so it only made sense to develop a dedicated application to sit on top of Splunk, ingest all infrastructure data for a single pane of glass and easier reporting, but also delivering answers to specific DSPT assertions.