0.16% of National Health Service machines are currently using Windows XP. It is not possible to set a timeframe for complete removal of Windows XP from all NHS machines. This is because removal is not always possible, particularly where Windows XP is embedded in medical devices. All NHS organisations have been given guidance on how to mitigate the risks if they cannot completely remove Windows XP from their estate, for example, they can segregate the affected machines from the network. They can also contact NHS Digital for further bespoke advice and support to mitigate risks. All NHS organisations must report through the mandatory Data Security and Protection Toolkit (DSPT) whether or not they continue to run unsupported systems. Through the DSPT organisations must provide assurance that they are managing, monitoring and mitigating the risk. NHS Digital and NHSX then follow up with NHS trusts if that assurance is unsatisfactory.