DENTAL PRACTICE TECHNOLOGY

Cyber Resilience Checklist

A quick self-assessment for care home managers. Answer Yes, No or Not sure for each question, then use the score at the end to spot where the gaps are. It takes about 10 minutes. Items marked ★ are critical.

About You

This part isn't scored. It helps us tailor any advice to your setup.

Name *

Job Title

Email Address *

Phone *

Practice Name *

Number of Surgeries *

Number of Staff *

Roughly How Many PC's and Devices? *

Who Supports Your IT Now? *In-HouseAn IT ProviderNobody

If a Provider, When Does the Contract Renew? *

Q1. Patient Data Security & Access

Every team member has their own login to the practice management system, with no shared or generic accounts ★ *YesNoUnsure

Access to patient records and X-rays is limited by role (e.g. reception vs. clinical vs. principal) *YesNoUnsure

Email and practice systems use two-step login (a code or app), not just a password ★ *YesNoUnsure

Devices used to view patient records (surgery PCs, laptops, tablets) are password- or PIN-protected *YesNoUnsure

Staff accounts are switched off on the day someone leaves *YesNoUnsure

Q1 Score

Q2. Backup & Business Continuity

Patient records, X-ray images and treatment plans are all backed up automatically *YesNoUnsure

Your Microsoft 365 email and files have their own backup, rather than relying on Microsoft to keep them *YesNoUnsure

Backups are tested regularly, not just assumed to be working ★ *YesNoUnsure

At least one backup is stored away from your main systems, so ransomware or a fire can't take out both *YesNoUnsure

There's a written plan for keeping appointments running if IT systems fail (paper diary, phone fallback, etc.) *YesNoUnsure

Q2 Score

Q3. Compliance & Certification

CQC inspections increasingly ask how technology supports safe, well-led care, and GDC standards require patient information to be kept confidential. Private-only practice? The DSPT question doesn't apply to you, so count it as a "Yes".

NHS contract holders: your latest Data Security and Protection Toolkit (DSPT) was published at Standards Met or above ★ *YesNoUnsure

You hold current Cyber Essentials or Cyber Essentials Plus certification *YesNoUnsure

You have cyber insurance cover *YesNoUnsure

All staff know what to do, and who to tell, if a data breach or lost device happens *YesNoUnsure

Q3 Score

Q4. Communication & Connectivity

Internet and wifi are reliable in every surgery, not just reception *YesNoUnsure

Your phone system and card machines will keep working after the analogue phone network is switched off on 31 January 2027 *YesNoUnsure

Patient wifi in the waiting room is separate from the practice network *YesNoUnsure

Referrals and patient information are sent by secure email such as NHSmail, not ordinary email *YesNoUnsure

Q4 Score

Q5. Staff & Training

Staff get refresher training on spotting phishing emails and scam calls at least once a year *YesNoUnsure

New starters are taught data protection and security basics as part of their induction *YesNoUnsure

There's a simple, known process for staff to report a suspected IT or security issue *YesNoUnsure

Q5 Score

Q6. Devices & Support

All computers get security and antivirus updates automatically *YesNoUnsure

All computers run a supported version of Windows *YesNoUnsure

Any computer that can't be updated (often X-ray or scanner PCs) is kept separate from the rest of the network *YesNoUnsure

Suppliers can only access your systems remotely when you've agreed it *YesNoUnsure

Q6 Score

How did you score?

Count your Yes answers. No and Not sure both score zero.

21–25: Your setup is in good shape — worth a periodic check-in to make sure it stays that way. Book a review to confirm nothing's been missed.

13–20: You have solid foundations but some real gaps — likely worth a conversation about priorities.

Below 13: There are meaningful risks here, particularly around patient data security and continuity — we'd recommend talking it through sooner rather than later.

Any ★ item answered No or Not sure? Book a review whatever your score.

Several Not sure answers? That usually means nobody owns that area, which is worth fixing in its own right.

Found gaps? Book your Technology Resilience Review.

We'll go through your results with you and show you what to fix first.

Book at unity.world/book-your-technology-resilience-review or scan the QR code.

Bring your completed checklist and we'll start there. Prefer a quick chat? Call Connor Scotchbrook on 0330 119 6666 or email connor@unity.world

Scan to book

Keeping in touchYes, I'd like Unity to send me occasional marketing, including guidance, updates and event invitations. I can unsubscribe at any time.Sure!

Total Score

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.