Policy paper

Annex A: wider guidance

Published 11 February 2026

Applies to England

The following general guidance documents and instructions apply to NHS Counter Fraud Authority (NHSCFA). The Department of Health and Social Care (DHSC) may require NHSCFA to provide additional management information on an ad hoc basis. Where this is the case, DHSC will provide NHSCFA with clear reasons for the request and will allow as much time as possible to comply with the request. NHSCFA shall comply with the following guidance, documents and instructions.

Corporate governance

• DHSC and NHSCFA framework document 2026 to 2029
• Corporate governance code for central government departments 2017 (relevant to arm’s length bodies (ALBs)) and supporting guidance
• Code of conduct for board members of public bodies
• Code of good practice for partnerships between departments and arm’s length bodies

Financial management and reporting

• Managing public money (MPM) handbook
• Fees, charges and levies guide, chapter 6 of the MPM handbook
• Banking and managing cash, annex 5.6 of the MPM handbook
• Consolidated budgeting guidance
• Government financial reporting manual (FReM)
• relevant dear accounting officer (DAO) letters
• relevant guidance and instructions issued by HM Treasury in respect of Whole of Government Accounts
• the most recent letter setting out the delegated authorities, issued by the parent department (see Annex D: delegation letter published alongside this document)

Management of risk

• Orange Book: Management of Risk – Principles and Concepts and the management of risk in government framework
• Complete Global Internal Audit Standards and Application note: Global Internal Audit Standards in the UK Public Sector
• HM Treasury approval processes for major projects above delegated limits
• the government cyber-security strategy and cyber security guidance for business

Commercial management

• Procurement policy notes
• Cabinet Office spending controls
• Transparency in supply chains - a practical guide

Public appointments

The following are relevant where public bodies participate in public appointments processes.

• guidance from the Commissioner for Public Appointments
• Governance Code on Public Appointments
• guidance for ministerial appointments to public bodies
• Procurement Policy Note 08/15 – tax arrangements of public appointees

Staff and remuneration

• Public sector pay and terms: NHS Terms and Conditions of Service Handbook
• Whistleblowing guidance and code of practice
• Equalities Act 2010
• Cabinet Office’s guidance on Staff of Public Bodies
• DHSC pay framework for very senior managers in special health authorities
• NHSCFA is a member of the Counter Fraud Profession

General

• NHS records management Code of Practice
• Freedom of Information Act guidance and instructions
• Parliamentary and Health Service Ombudsman’s Principles of Good Administration
• Consolidation Officer Memorandum, and relevant ‘Dear Consolidation Officer’ (DCO) letters
• any departmental plans to ensure continuity of services
• specific instructions and guidance issued by DHSC, including requests for information
• other relevant instructions and guidance issued by the central departments (Cabinet Office and HM Treasury)
• recommendations made by the Public Accounts Committee, or by other Parliamentary authority, that have been accepted by the government and are relevant to the NHSCFA
• Cabinet Office’s guidance: Public bodies
• Civil Service diversity and inclusion strategy (2022 to 2025) (outlines the ambition, to which arm’s length bodies can contribute)
• Infrastructure and Projects Authority (IPA) guidance of project and programme management
• Government Digital Service
• Government Fraud and Error, Debt and Grant Efficiency functions
• Code of Practice for Official Statistics
• Accounting officer system statements (AOSS) - these are produced by departments with input from ALBs

Estates and sustainability

• Greening Government Commitments
• Government Property Unit national property controls and standards for office accommodation (available from DHSC)
• DHSC’s property asset management procedures

Information governance and security

• NHS Information governance toolkit
• UK government IA Standard No. 6: Protecting Personal Data and Managing Information Risk (available from DHSC)
• UK government’s security policy framework
• Information Security Management: NHS Code of Practice
• Confidentiality: NHS Code of Practice