ccs-digitalmarketplace-frameworks 1.0.9 → 1.1.2

package/SECURITY.md

@@ -0,0 +1,7 @@
+Contact: cybersecurity@crowncommercial.gov.uk
+
+Policy: https://www.crowncommercial.gov.uk/about-ccs/vulnerability-disclosure-policy/
+
+Acknowledgements: https://github.com/Crown-Commercial-Service/ccs-vulnerability-disclosure-policy/blob/main/acknowledgements.txt
+
+Encryption: https://github.com/Crown-Commercial-Service/ccs-vulnerability-disclosure-policy/blob/main/vulnerability-disclosure-public-encryption.pub

package/frameworks/digital-outcomes-6/questions/declaration/modernSlaveryStatement.yml

@@ -1,11 +1,5 @@
 name: Modern slavery statement required
+id: modernSlaveryStatement
 question: Provide the relevant link to the slavery and human trafficking statement that appears in a prominent place on your organisations website homepage.
 
-type: text
-hidden: true
-
-validations:
-  - name: answer_required
-    message: You need to answer this question.
-  - name: invalid_url_format
-    message: You must enter a valid web address.
+type: text

package/frameworks/digital-outcomes-6/questions/declaration/modernSlaveryStatementOptional.yml

@@ -1,9 +1,4 @@
 name: Modern slavery statement optional
 question: You can choose to provide the relevant link to the slavery and human trafficking statement that appears in a prominent place on your organisations website homepage.
 
-type: text
-hidden: true
-
-validations:
-  - name: invalid_url_format
-    message: You must enter a valid web address.
+type: text

package/frameworks/g-cloud-13/manifests/declaration.yml

@@ -67,7 +67,6 @@
   questions:
     - conspiracy
     - corruptionBribery
-    - fraudAndTheft
     - terrorism
     - organisedCrime
 
@@ -79,14 +78,14 @@
   description: |
     You must be able to truthfully answer ‘no’ to every question under ‘Grounds for discretionary exclusion’
     for your bid to be considered eligible. If you can’t answer ‘no’, your bid may not be accepted.
-    
+
     If you do answer ‘yes’, you must provide full details of any subsequent event or remedial action that
     you think the Crown Commercial Service (CCS) should take into consideration. CCS will use the information
     you provide to consider whether or not you will be able to proceed any further with this procurement.
 
     In questions [[taxEvasion]] to [[misleadingInformation]], ‘a partner organisation’ includes members
     of your group of economic operators or their proposed subcontractors.
-    
+
     CCS can also exclude you if you are guilty of serious
     misrepresentation in providing any information referred to within
     regulations
@@ -112,9 +111,8 @@
     - confidentialInformation
     - misleadingInformation
     - mitigatingFactors
-    - unspentTaxConvictions
-    - GAAR
-    - mitigatingFactors2
+    - multiqunspentTaxConvictions
+    - multiqGAAR
 
 -
   name: Working with government
@@ -124,12 +122,10 @@
   description: |
     You must be able to truthfully answer ‘yes’ to every question under ‘Working with government’ for your bid to be
     considered eligible.
-    
+
     If you can’t answer ‘yes’ to every question in this section, it’s very unlikely that your bid will be accepted.
   questions:
-    - environmentallyFriendly
     - socialValueModel
-    - equalityAndDiversity
     - employersInsurance
     - helpBuyersComplyTechnologyCodesOfPractice
     - publishContracts
@@ -163,7 +159,7 @@
   editable: True
   prefill: False
   description: |
-    You must confirm the accuracy of the information in this declaration and in your service descriptions. We might 
+    You must confirm the accuracy of the information in this declaration and in your service descriptions. We might
     ask for proof after you’ve submitted your application.
 
   questions:
@@ -207,11 +203,12 @@
   name: Contact details
   slug: contact-details
   editable: True
-  prefill: True  
+  prefill: True
   description: |
-     The Crown Commercial Service will use the primary contact information to contact your organisation if it has any questions about your application.  
+     The Crown Commercial Service will use the primary contact information to contact your organisation if it has any questions about your application.
   questions:
-    - primaryContact
+    - contact
+    - contactsRole
     - primaryContactEmail
     - contactNameContractNotice
     - contactEmailContractNotice

package/frameworks/g-cloud-13/manifests/display_service.yml

@@ -89,8 +89,10 @@
     - webInterfaceAccessibilityDescription
     - webInterfaceAccessibilityTesting
     - serviceInterface
+    - userSupportAccessibility
     - serviceInterfaceDescription
     - serviceInterfaceAccessibility
+    - serviceInterfaceAccessibility2
     - serviceInterfaceAccessibilityDescription
     - serviceInterfaceTesting
     - APIHosting
@@ -218,6 +220,8 @@
     - standardsPCIWho
     - standardsPCIWhen
     - standardsPCIExclusions
+    - standardsCyberEssentials
+    - standardsCyberEssentialsPlus
     - accreditationsOther
     - accreditationsOtherList
 
@@ -265,6 +269,14 @@
     - energyEfficientDatacentres
     - energyEfficientDatacentresDescription
 
+- name: Social Value
+  questions:
+    - fightingClimateChange
+    - covid19Recovery
+    - tacklingEconomicInequality
+    - equalOpportunity
+    - wellbeing
+
 - name: Pricing
   questions:
     - price

package/frameworks/g-cloud-13/manifests/edit_service_as_admin.yml

@@ -11,6 +11,7 @@
     - serviceDescription
     - serviceCategoriesSoftware
     - serviceCategoriesHosting
+    - supportMultiCloud
 
 - name: Service features and benefits
   editable: true

package/frameworks/g-cloud-13/manifests/edit_submission.yml

@@ -17,6 +17,7 @@
     - serviceDescription
     - serviceCategoriesSoftware
     - serviceCategoriesHosting
+    - supportMultiCloud
 
 - name: Service features and benefits
   editable: false
@@ -97,6 +98,7 @@
     - multiqMobile
     - multiqWebInterface
     - multiqServiceInterface
+    - multiqUserSupport
     - multiqAPIHosting
     - multiqAPISoftware
     - multiqCommandLineInterface
@@ -239,6 +241,7 @@
     - multiqStandardsISO28000
     - multiqStandardsCSASTAR
     - multiqStandardsPCI
+    - multiqStandardsCyber
     - multiqAccreditationsOther
 
 - name: Energy efficiency
@@ -247,6 +250,16 @@
   questions:
     - multiqEnergyEfficiency
 
+- name: Social Value
+  editable: false
+  edit_questions: true
+  questions:
+    - fightingClimateChange
+    - covid19Recovery
+    - tacklingEconomicInequality
+    - equalOpportunity
+    - wellbeing
+
 - name: Pricing
   editable: false
   edit_questions: true

package/frameworks/g-cloud-13/manifests/services_search_filters.yml

@@ -5,6 +5,7 @@
     - serviceCategoriesSoftware
     - serviceCategoriesHosting
     - serviceCategoriesSupport
+    - supportMultiCloud
 -
   name: Cloud deployment model
   questions:
@@ -20,6 +21,12 @@
     - phoneSupport
     - webChatSupport
     - onsiteSupport
+
+-
+name: Service interface
+  questions:
+    - serviceInterfaceAccessibility
+
 -
   name: Using the service
   questions:
@@ -80,6 +87,9 @@
     - standardsISO28000
     - standardsCSASTAR
     - standardsPCI
+    - standardsCyberEssentials
+    - standardsCyberEssentialsPlus
+    - accreditationsOther
 -
   name: Security governance standards
   questions:

package/frameworks/g-cloud-13/questions/declaration/GAAR.yml

@@ -5,7 +5,13 @@ question: >
     - HMRC successfully challenged it under the General Anti-Abuse Rule (GAAR) or Halifax abuse principle
     - a tax authority (in a jurisdiction in which your organisation is established) successfully challenged it under any tax rules or legislation that have an effect equivalent or similar to the GAAR or Halifax abuse principle
     - a failure to notify, or failure of an avoidance scheme in which you are or were involved, under the Disclosure of Tax Avoidance Scheme rules (DOTAS), VADR (Schedule 11A to the Value Added Tax Act 1994 (as amended by Schedule 1 to the Finance (no. 2) Act 2005)) or any equivalent or similar regime in a jurisdiction in which your organisation is established
+
 type: boolean
+
+followup:
+  groundsForDiscretionary2:
+    - true
+
 assessment:
   passIfIn:
     - False

package/frameworks/g-cloud-13/questions/declaration/canProvideFromDayOne.yml

@@ -2,7 +2,7 @@ name: Providing services straight away
 question: >
   If your application is successful, can you provide all the services you’re submitting to G-Cloud 13 from the first day you’re awarded a place on the framework?
 type: boolean
-hint: You must be ready to provide the services you’re submitting from September 2525.
+
 assessment:
   passIfIn:
     - True

package/frameworks/g-cloud-13/questions/declaration/{primaryContact.yml → contact.yml}

@@ -1,3 +1,3 @@
-name: Primary contact name
+name: contact name
 question: Who is the primary contact for the application?
 type: text

package/frameworks/g-cloud-13/questions/declaration/contactsRole.yml

@@ -0,0 +1,5 @@
+name: Contact’s role
+question: >
+  What is the contact’s role in the organisation?
+type: text
+

package/frameworks/g-cloud-13/questions/declaration/corruptionBribery.yml

@@ -6,8 +6,6 @@ question: >
     - the common law offence of bribery
     - bribery within the meaning of sections 1, 2 or 6 of the Bribery Act 2010
     - section 113 of the Representation of the People Act 1983
-    - any other offence within the meaning of article 57(1) of the Public Contracts Directive as defined by the law of any jurisdiction outside England and Wales and Northern Ireland
-    - any other offence within the meaning of article 57(1) of the Public Contracts Directive created after 26th February 2015 in England, Wales or Northern Ireland
 
 type: boolean
 hint: Answer ‘yes’ if anyone who represents, supervises or has control in your organisation or a partner or parent organisation has been convicted of any of the above.

package/frameworks/g-cloud-13/questions/declaration/environmentalSocialLabourLaw.yml

@@ -8,8 +8,7 @@ question: >
 
 hint:
   For example, if any finding of unlawful discrimination has been made against the organisation by an Employment Tribunal or Employment Appeal Tribunal.
-  
-  Read more about <a href="https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/551130/List_of_Mandatory_and_Discretionary_Exclusions.pdf" target="_blank" rel="noopener noreferrer">your obligations in the field of environment, social and labour law (link opens in a new tab)</a>
+  Read more about <a href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/956764/Annex_C_Exclusion_Grounds.pdf" target="_blank" rel="noopener noreferrer">your obligations in the field of environment, social and labour law (link opens in a new tab)</a>
 
 type: boolean
 assessment:

package/frameworks/g-cloud-13/questions/declaration/groundsForDiscretionary.yml

@@ -0,0 +1,34 @@
+name: __Place holder for question name 31(a)
+question: If you responded 'yes', enter details for each occurrence.
+
+hint: |
+  The details you provide should include:
+
+   - Country concerned
+   - what is the amount concerned
+   - how the breach was established: through a judicial or administrative decision or by other means
+   - the date of the decision, if the breach has been established through a judicial or administrative decision
+   - if the breach has been established by other means, specify the means
+
+  You should also confirm whether you have paid or have entered into a binding arrangement with a view to paying the outstanding sum, including, where applicable, any accrued interest and / or fines.
+
+  If evidence of meeting all obligations is available electronically, provide details of:
+
+   - web address
+   - issuing authority
+   - precise reference of the documents
+
+
+type: textbox_large
+max_length_in_words: 500
+
+validations:
+  -
+    name: answer_required
+    message: You need to answer this question because you answered ‘yes’ to the Unspent tax convictions question.
+  -
+    name: under_word_limit
+    message: "Your answer must be no more than 500 words."
+  -
+    name: under_character_limit
+    message: "Your answer must be no more than 5000 characters."

package/frameworks/g-cloud-13/questions/declaration/groundsForDiscretionary2.yml

@@ -0,0 +1,31 @@
+name: __Place holder for question name 32(a)
+question: If you responded 'yes', enter details for each occurrence.
+
+hint: |
+  The details you provide should include:
+
+   - Country concerned
+   - what is the amount concerned
+   - how and when the breach was established or challenge brought
+
+  You should also confirm whether you have paid or have entered into a binding arrangement with a view to paying the outstanding sum, including, where applicable, any accrued interest and / or fines.
+
+  If evidence of meeting all obligations is available electronically, provide details of:
+
+   - web address
+   - issuing authority
+   - precise reference of the documents
+
+type: textbox_large
+max_length_in_words: 500
+
+validations:
+  -
+    name: answer_required
+    message: You need to answer this question because you answered ‘yes’ to the Incorrect tax returns question.
+  -
+    name: under_word_limit
+    message: "Your answer must be no more than 500 words."
+  -
+    name: under_character_limit
+    message: "Your answer must be no more than 5000 characters."

package/frameworks/g-cloud-13/questions/declaration/mitigatingFactors.yml

@@ -2,6 +2,19 @@ name: Mitigating factors for discretionary exclusion ([[taxEvasion]] to [[mislea
 question: >
   If you responded ‘yes’ to any of the questions [[taxEvasion]] to [[misleadingInformation]], please provide details of
   any mitigating factors that you think should be taken into consideration.
+
+hint: |
+  The details you provide should include:
+
+    - date of the violation or offence
+    - which of the grounds listed applied
+    - the facts and circumstances relating to the violation or offence
+    - details of investigations carried out by relevant authorities
+    - evidence that you have paid or made arrangements to pay any compensation due
+    - web address of relevant documentation
+    - issuing authority
+    - precise reference of the documents
+
 type: textbox_large
 max_length_in_words: 500
 

package/frameworks/g-cloud-13/questions/declaration/multiqGAAR.yml

@@ -0,0 +1,8 @@
+id: multiqGAAR
+name: Tax return was incorrect
+question: ""
+
+type: multiquestion
+questions:
+  - GAAR
+  - groundsForDiscretionary2

package/frameworks/g-cloud-13/questions/declaration/multiqunspentTaxConvictions.yml

@@ -0,0 +1,8 @@
+id: multiqunspentTaxConvictions
+name: Unspent tax convictions
+question: ""
+
+type: multiquestion
+questions:
+  - unspentTaxConvictions
+  - groundsForDiscretionary

package/frameworks/g-cloud-13/questions/declaration/organisedCrime.yml

@@ -11,6 +11,7 @@ question: >
     - an offence under section 2 or section 4 of the Modern Slavery Act 2015
     - any other offence within the meaning of Article 57(1) of the Public Contracts Directive as defined by the law of any jurisdiction outside England, Wales and Northern Ireland
     - any other offence within the meaning of Article 57(1) of the Public Contracts Directive created after 26 February 2015 in England, Wales or Northern Ireland
+
 type: boolean
 hint: Answer ‘yes’ if anyone who represents, supervises or has control in your organisation or a partner or parent organisation has been convicted of any of the above.
 assessment:

package/frameworks/g-cloud-13/questions/declaration/primaryContactEmail.yml

@@ -1,3 +1,3 @@
-name: Primary contact email
+name: contact email
 question: What is the primary contact’s email address?
 type: text

package/frameworks/g-cloud-13/questions/declaration/seriousMisrepresentation.yml

@@ -1,6 +1,10 @@
 name: Serious misrepresentation of information
 question: >
-  In the last 3 years, has your organisation (or any partner organisation) been guilty of serious misrepresentation of the information required for the fulfilment of the selection criteria?
+  Please confirm whether, within the past 3 years, your organisation or any of your partner organisations has:
+
+    - withheld such information or failed to submit supporting documents required under Regulation 59 of the Public Contracts Regulations 2015
+      http://www.legislation.gov.uk/uksi/2015/102/regulation/59/made
+
 type: boolean
 assessment:
   passIfIn:

package/frameworks/g-cloud-13/questions/declaration/subcontracting30DayPayments.yml

@@ -1,7 +1,7 @@
 name: Subcontracting 30 day payment terms
 question: Can you confirm that for public sector contracts awarded under the Public Contract Regulations 2015 you have systems in place to include (as a minimum) 30-day payment terms in all of your supply chain contracts and require that such terms are passed down through your supply chain?
 
-hint: Contracts awarded under the Public Contracts Regulations 2015 must comply with <a class="govuk-link" href="https://www.legislation.gov.uk/uksi/2015/102/regulation/113/made" target="_blank" rel="noopener noreferrer">Regulation 113 for prompt payment of all subcontractors (opens in new tab)</a>. The Crown Commercial Service reserves the right to audit any supplier for compliance, where an awarded contract has a value of £2 million or more a year.
+hint: Contracts awarded under the Public Contracts Regulations 2015 must comply with <a class="govuk-link" href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/930703/Guidance_on_how_to_take_account_of_a_supplier_s_approach_to_payment_in_the_procurement_of_major_contracts.pdf" target="_blank" rel="noopener noreferrer">Procurement Policy Note (PPN) 07/20 for prompt payment of all subcontractors (opens in new tab)</a>. The Crown Commercial Service reserves the right to audit any supplier for compliance, where an awarded contract has a total value of £2 million or more.
 
 type: boolean
 hidden: true

package/frameworks/g-cloud-13/questions/declaration/supplierCodeOfConduct.yml

@@ -1,5 +1,5 @@
 name: Supplier Code of Conduct
-question: Will you comply with the <a class="govuk-link" href="https://www.gov.uk/government/publications/supplier-code-of-conduct" target="_blank" rel="noopener noreferrer">Supplier Code of Conduct (opens in new tab)</a>?
+question: Will you comply with the <a class="govuk-link" href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/779660/20190220-Supplier_Code_of_Conduct.pdf" target="_blank" rel="noopener noreferrer">Supplier Code of Conduct (opens in new tab)</a>?
 type: boolean
 assessment:
   passIfIn:

package/frameworks/g-cloud-13/questions/declaration/unfairCompetition.yml

@@ -1,12 +1,12 @@
 name: No unfair access to information
 question: >
-  Please confirm that no party involved in the application has:
+  Can you confirm that all parties involved in the application have behaved responsibly and have:
 
-    - colluded to set prices with other suppliers or buyers
-    - entered into any arrangement with another person so that person refrains from submitting an application
-    - given access to information relating to the application to another person, or offered or given payment to another person in exchange for information
-    - given inducement or valuable consideration to another person (except where such communication takes place with people who are also participants in the application, or where disclosure is made in confidence to obtain necessary information or security for the application)
-    - canvassed, or attempted to buy information from, any government agent about this procurement
+    - not colluded to set prices with other suppliers or buyers
+    - not entered into any arrangement with another person so that person refrains from submitting an application
+    - not given access to information relating to the application to another person, or offered or given payment to another person in exchange for information
+    - not given inducement or valuable consideration to another person (except where such communication takes place with people who are also participants in the application, or where disclosure is made in confidence to obtain necessary information or security for the application)
+    - not canvassed, or attempted to buy information from, any government agent about this procurement
 
 hint: >
     Answer ‘yes’ to confirm they have not done anything described in the question.

package/frameworks/g-cloud-13/questions/declaration/unspentTaxConvictions.yml

@@ -5,6 +5,11 @@ question: >
     - been found to be incorrect as of 1 April 2013
     - given rise to a criminal conviction for tax-related offences which is unspent, or to civil penalty for fraud or evasion
 type: boolean
+
+followup:
+  groundsForDiscretionary:
+    - true
+
 assessment:
   passIfIn:
     - False

package/frameworks/g-cloud-13/questions/services/accreditationsOther.yml

@@ -6,6 +6,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 followup:
   accreditationsOtherList:
     - true

package/frameworks/g-cloud-13/questions/services/accreditationsOtherList.yml

@@ -7,6 +7,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 list_item_name: security certification
 type: list

package/frameworks/g-cloud-13/questions/services/covid19Recovery.yml

@@ -0,0 +1,21 @@
+name: Covid-19 recovery
+question: Covid-19 recovery
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by PCI DSS certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-13/questions/services/equalOpportunity.yml

@@ -0,0 +1,21 @@
+name: Equal opportunity
+question: Equal opportunity
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by PCI DSS certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-13/questions/services/fightingClimateChange.yml

@@ -0,0 +1,21 @@
+name: Fighting climate change
+question: Fighting Climate Change
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by PCI DSS certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-13/questions/services/multiqServiceInterface.yml

@@ -4,7 +4,10 @@ question: Service interface
 depends:
   - "on": lot
     being:
+      - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqStandardsCyber.yml

@@ -0,0 +1,15 @@
+name: Cyber essentials
+question: Cyber essentials
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: multiquestion
+questions:
+  - standardsCyberEssentials
+  - standardsCyberEssentialsPlus

package/frameworks/g-cloud-13/questions/services/multiqStandardsPCI.yml

@@ -6,6 +6,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqUserSupport.yml

@@ -0,0 +1,15 @@
+name: User support
+question: User support
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: multiquestion
+questions:
+  - userSupportAccessibility
+

package/frameworks/g-cloud-13/questions/services/publicSectorNetworksTypes.yml

@@ -18,6 +18,7 @@ options:
     value: pnn
   - label: NHS Network (N3)
     value: n3
+    filter_ignore: true
   - label: Joint Academic Network (JANET)
     value: janet
   - label: Scottish Wide Area Network (SWAN)

package/frameworks/g-cloud-13/questions/services/serviceInterfaceAccessibility.yml

@@ -1,10 +1,13 @@
 name: Accessibility standards
-question: What accessibility standards does your service meet?
+question: What accessibility standards does your service interface meet?
+
 
 depends:
   - "on": lot
     being:
       - cloud-software
+
+
 followup:
   serviceInterfaceAccessibilityDescription:
     - none