Meeting Funder and Commissioner Security Requirements

Funders, commissioners and public sector partners increasingly ask charities to prove they handle data securely – through Cyber Essentials, the NHS Data Security and Protection Toolkit, due diligence questionnaires and contract clauses. This course helps charity leaders and bid writers understand these requirements, answer security questions confidently and accurately, and meet ongoing obligations after the contract is won.

Who this course is for: Chief executives, bid and contract managers, operations and data protection leads, and service managers delivering NHS, local authority, government or grant-funded services. No technical knowledge needed.

Self-paced online learning. Earn a Certificate of Completion on passing.

What you will learn

• Recognise common security and data protection requirements in grants and contracts
• Understand Cyber Essentials, the NHS Data Security and Protection Toolkit and ISO 27001 at a practical level
• Answer security due diligence questionnaires accurately with evidence
• Negotiate and manage data protection and security clauses in contracts
• Plan and budget for requirements, including in full cost recovery
• Maintain compliance and report incidents throughout a contract

Course modules

• The landscape
• Key schemes and standards
• Answering questions and agreeing contracts
• Delivering and maintaining compliance