ccs-digitalmarketplace-frameworks 1.1.0 → 1.1.4

package/SECURITY.md

@@ -0,0 +1,7 @@
+Contact: cybersecurity@crowncommercial.gov.uk
+
+Policy: https://www.crowncommercial.gov.uk/about-ccs/vulnerability-disclosure-policy/
+
+Acknowledgements: https://github.com/Crown-Commercial-Service/ccs-vulnerability-disclosure-policy/blob/main/acknowledgements.txt
+
+Encryption: https://github.com/Crown-Commercial-Service/ccs-vulnerability-disclosure-policy/blob/main/vulnerability-disclosure-public-encryption.pub

package/frameworks/digital-outcomes-6/manifests/edit_service.yml

@@ -35,7 +35,7 @@
   questions:
     - outcomesLocations
 
-- name: Digital role to deliver the capabilites
+- name: Digital role to deliver the capabilities
   editable: False
   questions:
     - ApplicationOperationsEngineer

package/frameworks/digital-outcomes-6/manifests/edit_service_as_admin.yml

@@ -35,7 +35,7 @@
   questions:
     - outcomesLocations
 
-- name: Digital role to deliver the capabilites
+- name: Digital role to deliver the capabilities
   editable: True
   questions:
     - ApplicationOperationsEngineer

package/frameworks/digital-outcomes-6/manifests/edit_submission.yml

@@ -48,7 +48,7 @@
   questions:
     - outcomesLocations
 
-- name: Digital role to deliver the capabilites
+- name: Digital role to deliver the capabilities
   summary_page_description: >
     You must be able to provide at least one team capability to be eligible to
     supply digital outcomes.

package/frameworks/digital-outcomes-6/questions/services/ApplicationOperationsEngineer.yml

@@ -13,3 +13,20 @@ questions:
 empty_message: You have not added an Application operations engineer
 
 hint: For the team capabilities you can provide, state the corresponding digital roles you can offer and the day rates.
+
+validations:
+  - name: answer_required
+    field: applicationoperationsengineerPriceMin
+    message: 'You need to answer this question.'
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMin
+    message: "Minimum price must be a number, without units, eg 99.95"
+  - name: answer_required
+    field: applicationoperationsengineerPriceMax
+    message: Enter the amount you will charge for an application operations engineer
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMax
+    message: Maximum price must be a number, without units, like 99.95
+  - name: max_less_than_min
+    field: applicationoperationsengineerPriceMax
+    message: "Minimum price must be less than maximum price"

package/frameworks/digital-outcomes-6/questions/services/BusinessRelationshipManager.yml

@@ -13,3 +13,20 @@ questions:
 empty_message: You have not added an Business Relationship manager
 
 hint: For the team capabilities you can provide, state the corresponding digital roles you can offer and the day rates.
+
+validations:
+  - name: answer_required
+    field: applicationoperationsengineerPriceMin
+    message: 'You need to answer this question.'
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMin
+    message: "Minimum price must be a number, without units, eg 99.95"
+  - name: answer_required
+    field: applicationoperationsengineerPriceMax
+    message: Enter the amount you will charge for an application operations engineer
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMax
+    message: Maximum price must be a number, without units, like 99.95
+  - name: max_less_than_min
+    field: applicationoperationsengineerPriceMax
+    message: "Minimum price must be less than maximum price"

package/frameworks/digital-outcomes-6/questions/services/BussinessAnalyst.yml

@@ -13,3 +13,20 @@ questions:
 empty_message: You have not added a Business Analyst
 
 hint: For the team capabilities you can provide, state the corresponding digital roles you can offer and the day rates.
+
+validations:
+  - name: answer_required
+    field: applicationoperationsengineerPriceMin
+    message: 'You need to answer this question.'
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMin
+    message: "Minimum price must be a number, without units, eg 99.95"
+  - name: answer_required
+    field: applicationoperationsengineerPriceMax
+    message: Enter the amount you will charge for an application operations engineer
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMax
+    message: Maximum price must be a number, without units, like 99.95
+  - name: max_less_than_min
+    field: applicationoperationsengineerPriceMax
+    message: "Minimum price must be less than maximum price"

package/frameworks/digital-outcomes-6/questions/services/ChangeAndReleaseManager.yml

@@ -13,3 +13,20 @@ questions:
 empty_message: You have not added a change and release manager
 
 hint: For the team capabilities you can provide, state the corresponding digital roles you can offer and the day rates.
+
+validations:
+  - name: answer_required
+    field: applicationoperationsengineerPriceMin
+    message: 'You need to answer this question.'
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMin
+    message: "Minimum price must be a number, without units, eg 99.95"
+  - name: answer_required
+    field: applicationoperationsengineerPriceMax
+    message: Enter the amount you will charge for an application operations engineer
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMax
+    message: Maximum price must be a number, without units, like 99.95
+  - name: max_less_than_min
+    field: applicationoperationsengineerPriceMax
+    message: "Minimum price must be less than maximum price"

package/frameworks/digital-outcomes-6/questions/services/CommandandControlCenterManager.yml

@@ -13,3 +13,20 @@ questions:
 empty_message: You have not added a command and control center manager
 
 hint: For the team capabilities you can provide, state the corresponding digital roles you can offer and the day rates.
+
+validations:
+  - name: answer_required
+    field: applicationoperationsengineerPriceMin
+    message: 'You need to answer this question.'
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMin
+    message: "Minimum price must be a number, without units, eg 99.95"
+  - name: answer_required
+    field: applicationoperationsengineerPriceMax
+    message: Enter the amount you will charge for an application operations engineer
+  - name: not_money_format
+    field: applicationoperationsengineerPriceMax
+    message: Maximum price must be a number, without units, like 99.95
+  - name: max_less_than_min
+    field: applicationoperationsengineerPriceMax
+    message: "Minimum price must be less than maximum price"

package/frameworks/g-cloud-13/manifests/declaration.yml

@@ -105,8 +105,8 @@
     - conflictOfInterest
     - distortedCompetition
     - significantOrPersistentDeficiencies
-    - seriousMisrepresentation
     - witheldSupportingDocuments
+    - seriousMisrepresentation
     - influencedContractingAuthority
     - confidentialInformation
     - misleadingInformation

package/frameworks/g-cloud-13/manifests/display_service.yml

@@ -89,8 +89,10 @@
     - webInterfaceAccessibilityDescription
     - webInterfaceAccessibilityTesting
     - serviceInterface
+    - userSupportAccessibility
     - serviceInterfaceDescription
     - serviceInterfaceAccessibility
+    - serviceInterfaceAccessibility2
     - serviceInterfaceAccessibilityDescription
     - serviceInterfaceTesting
     - APIHosting
@@ -218,6 +220,8 @@
     - standardsPCIWho
     - standardsPCIWhen
     - standardsPCIExclusions
+    - standardsCyberEssentials
+    - standardsCyberEssentialsPlus
     - accreditationsOther
     - accreditationsOtherList
 
@@ -265,6 +269,10 @@
     - energyEfficientDatacentres
     - energyEfficientDatacentresDescription
 
+- name: Social Value
+  questions:
+    - multiqSocialValue
+
 - name: Pricing
   questions:
     - price

package/frameworks/g-cloud-13/manifests/edit_service_as_admin.yml

@@ -11,6 +11,7 @@
     - serviceDescription
     - serviceCategoriesSoftware
     - serviceCategoriesHosting
+    - supportMultiCloud
 
 - name: Service features and benefits
   editable: true

package/frameworks/g-cloud-13/manifests/edit_submission.yml

@@ -17,6 +17,7 @@
     - serviceDescription
     - serviceCategoriesSoftware
     - serviceCategoriesHosting
+    - supportMultiCloud
 
 - name: Service features and benefits
   editable: false
@@ -97,6 +98,7 @@
     - multiqMobile
     - multiqWebInterface
     - multiqServiceInterface
+    - multiqUserSupport
     - multiqAPIHosting
     - multiqAPISoftware
     - multiqCommandLineInterface
@@ -239,6 +241,7 @@
     - multiqStandardsISO28000
     - multiqStandardsCSASTAR
     - multiqStandardsPCI
+    - multiqStandardsCyber
     - multiqAccreditationsOther
 
 - name: Energy efficiency
@@ -247,6 +250,13 @@
   questions:
     - multiqEnergyEfficiency
 
+- name: Social Value
+  editable: false
+  edit_questions: true
+  questions:
+    - multiqSocialValue
+
+
 - name: Pricing
   editable: false
   edit_questions: true

package/frameworks/g-cloud-13/manifests/services_search_filters.yml

@@ -5,6 +5,7 @@
     - serviceCategoriesSoftware
     - serviceCategoriesHosting
     - serviceCategoriesSupport
+    - supportMultiCloud
 -
   name: Cloud deployment model
   questions:
@@ -20,6 +21,12 @@
     - phoneSupport
     - webChatSupport
     - onsiteSupport
+
+-
+name: Service interface
+  questions:
+    - serviceInterfaceAccessibility
+
 -
   name: Using the service
   questions:
@@ -80,6 +87,9 @@
     - standardsISO28000
     - standardsCSASTAR
     - standardsPCI
+    - standardsCyberEssentials
+    - standardsCyberEssentialsPlus
+    - accreditationsOther
 -
   name: Security governance standards
   questions:

package/frameworks/g-cloud-13/questions/declaration/MI.yml

@@ -1,7 +1,7 @@
 name: Providing management information (MI)
 question: >
   Do you confirm that you’re prepared to provide all the monthly G-Cloud 13-related management information (MI)
-  to CCS as outlined in the <a href="/suppliers/frameworks/g-cloud-13#reporting" target="_blank" rel="noopener noreferrer">reporting template (link opens in a new tab)</a>?
+  to CCS as outlined in the reporting template ?
 type: boolean
 assessment:
   passIfIn:

package/frameworks/g-cloud-13/questions/declaration/carbonReduction.yml

@@ -1,5 +1,5 @@
 name: Carbon reduction
-question: Public sector contracts with a total value of £5 million or more should take into account a supplier's <a href="https://www.gov.uk/government/publications/procurement-policy-note-0621-taking-account-of-carbon-reduction-plans-in-the-procurement-of-major-government-contracts" target="_blank" rel="noopener noreferrer">carbon reduction plans and commitment to Carbon Net Zero by 2050 (opens in a new tab)</a>. Screen reader support enabled.
+question: Public sector contracts with a total value of £5 million or more should take into account a supplier's <a href="https://www.gov.uk/government/publications/procurement-policy-note-0621-taking-account-of-carbon-reduction-plans-in-the-procurement-of-major-government-contracts" target="_blank" rel="noopener noreferrer">carbon reduction plans and commitment to Carbon Net Zero by 2050 (opens in a new tab)</a>.
 hint: >
   The Crown Commercial Service reserves the right to audit any supplier for compliance, where an awarded contract has a total value of £5 million or more.
 type: boolean

package/frameworks/g-cloud-13/questions/declaration/corruptionBribery.yml

@@ -8,7 +8,7 @@ question: >
     - section 113 of the Representation of the People Act 1983
 
 type: boolean
-hint: Answer ‘yes’ if anyone who represents, supervises or has control in your organisation or a partner or parent organisation has been convicted of any of the above.
+hint: Answer ‘yes’ if anyone who represents, supervises or has control in your organisation or a partner or parent organisation has been convicted of any of the above. Answer 'no' otherwise.
 assessment:
   passIfIn:
     - False

package/frameworks/g-cloud-13/questions/declaration/seriousMisrepresentation.yml

@@ -1,6 +1,10 @@
 name: Serious misrepresentation of information
 question: >
-  In the last 3 years, has your organisation (or any partner organisation) been guilty of serious misrepresentation of the information required for the fulfilment of the selection criteria?
+  Please confirm whether, within the past 3 years, your organisation or any of your partner organisations has:
+
+    - withheld such information or failed to submit supporting documents required under Regulation 59 of the Public Contracts Regulations 2015
+      http://www.legislation.gov.uk/uksi/2015/102/regulation/59/made
+
 type: boolean
 assessment:
   passIfIn:

package/frameworks/g-cloud-13/questions/declaration/socialValueModel.yml

@@ -1,5 +1,5 @@
 name: Social Value Model
-question: Are you aware of the <a href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/940826/Social-Value-Model-Edn-1.1-3-Dec-20.pdf" target="_blank" rel="noopener noreferrer">Social Value Model (opens in a new tab)</a> to <a href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/940826/Social-Value-Model-Edn-1.1-3-Dec-20.pdf" target="_blank" rel="noopener noreferrer"> deliver social value through government's commercial activities (opens in a new tab)</a>, and will you commit to delivering social value where specified by the buyer in their statement of requirements and their clarification questions?
+question: Are you aware of the <a href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/940826/Social-Value-Model-Edn-1.1-3-Dec-20.pdf" target="_blank" rel="noopener noreferrer">Social Value Model (opens in a new tab)</a> to <a href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/940826/Social-Value-Model-Edn-1.1-3-Dec-20.pdf" target="_blank" rel="noopener noreferrer"> deliver social value through government's commercial activities (opens in a new tab)</a>, and will you commit to delivering social value where specified by the buyer in their statement of requirements ?
 type: boolean
 assessment:
   passIfIn:

package/frameworks/g-cloud-13/questions/declaration/subcontracting30DayPayments.yml

@@ -1,7 +1,7 @@
 name: Subcontracting 30 day payment terms
 question: Can you confirm that for public sector contracts awarded under the Public Contract Regulations 2015 you have systems in place to include (as a minimum) 30-day payment terms in all of your supply chain contracts and require that such terms are passed down through your supply chain?
 
-hint: Contracts awarded under the Public Contracts Regulations 2015 must comply with <a class="govuk-link" href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/930703/Guidance_on_how_to_take_account_of_a_supplier_s_approach_to_payment_in_the_procurement_of_major_contracts.pdf" target="_blank" rel="noopener noreferrer">Regulation 113 for prompt payment of all subcontractors (opens in new tab)</a>. The Crown Commercial Service reserves the right to audit any supplier for compliance, where an awarded contract has a value of £2 million or more a year.
+hint: Contracts awarded under the Public Contracts Regulations 2015 must comply with <a class="govuk-link" href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/930703/Guidance_on_how_to_take_account_of_a_supplier_s_approach_to_payment_in_the_procurement_of_major_contracts.pdf" target="_blank" rel="noopener noreferrer">Procurement Policy Note (PPN) 07/20 for prompt payment of all subcontractors (opens in new tab)</a>. The Crown Commercial Service reserves the right to audit any supplier for compliance, where an awarded contract has a total value of £2 million or more.
 
 type: boolean
 hidden: true

package/frameworks/g-cloud-13/questions/services/QAAndTesting.yml

@@ -5,6 +5,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 followup:
   QAAndTestingDescription:
     - true

package/frameworks/g-cloud-13/questions/services/QAAndTestingDescription.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 
 type: textbox_large
 max_length_in_words: 200

package/frameworks/g-cloud-13/questions/services/accreditationsOther.yml

@@ -6,6 +6,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 followup:
   accreditationsOtherList:
     - true

package/frameworks/g-cloud-13/questions/services/accreditationsOtherList.yml

@@ -7,6 +7,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 list_item_name: security certification
 type: list

package/frameworks/g-cloud-13/questions/services/covid19Recovery.yml

@@ -0,0 +1,21 @@
+name: Covid-19 recovery
+question: Covid-19 recovery
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by PCI DSS certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-13/questions/services/equalOpportunity.yml

@@ -0,0 +1,21 @@
+name: Equal opportunity
+question: Equal opportunity
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by PCI DSS certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-13/questions/services/fightingClimateChange.yml

@@ -0,0 +1,21 @@
+name: Fighting climate change
+question: Fighting Climate Change
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by PCI DSS certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-13/questions/services/multiqAccreditationsOther.yml

@@ -6,6 +6,7 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqServiceInterface.yml

@@ -5,6 +5,7 @@ depends:
   - "on": lot
     being:
       - cloud-software
+      - cloud-professional
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqSocialValue.yml

@@ -0,0 +1,19 @@
+name: Social value
+question: Please provide further information about how your G-Cloud service provision will deliver against at least one or more of the following <a href="https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/921437/PPN-06_20-Taking-Account-of-Social-Value-in-the-Award-of-Central-Government-Contracts.pdf" target="_blank" rel="noopener noreferrer">Social Value themes outlined in PPN 06/20</a>.
+
+hint: It is expected that public sector buyers will request clarifications on Social Value and/or the information you provide as part of the G-Cloud buying process.
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: multiquestion
+questions:
+  - fightingClimateChange
+  - covid19Recovery
+  - tacklingEconomicInequality
+  - equalOpportunity
+  - wellbeing

package/frameworks/g-cloud-13/questions/services/multiqStandardsCSASTAR.yml

@@ -6,6 +6,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqStandardsCyber.yml

@@ -0,0 +1,15 @@
+name: Cyber essentials
+question: Cyber essentials
+
+depends:
+  - "on": lot
+    being:
+      - cloud-hosting
+      - cloud-software
+      - cloud-support
+      - cloud-professional
+
+type: multiquestion
+questions:
+  - standardsCyberEssentials
+  - standardsCyberEssentialsPlus

package/frameworks/g-cloud-13/questions/services/multiqStandardsISO28000.yml

@@ -7,6 +7,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqStandardsISOIEC27001.yml

@@ -7,6 +7,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqStandardsPCI.yml

@@ -6,6 +6,8 @@ depends:
     being:
       - cloud-hosting
       - cloud-software
+      - cloud-support
+      - cloud-professional
 
 type: multiquestion
 questions:

package/frameworks/g-cloud-13/questions/services/multiqUserSupport.yml

@@ -0,0 +1,13 @@
+name: User support
+question: User support
+
+depends:
+  - "on": lot
+    being:
+      - cloud-software
+      - cloud-professional
+
+type: multiquestion
+questions:
+  - userSupportAccessibility
+

package/frameworks/g-cloud-13/questions/services/ongoingSupport.yml

@@ -1,11 +1,5 @@
 name: Ongoing support service
 question: Do you support cloud hosting or software services?
-question_advice: >
-  Types of cloud support include:
-
-    - user management
-    - service management
-    - helpdesk support
 
 depends:
   - "on": lot

package/frameworks/g-cloud-13/questions/services/ongoingSupportDescription.yml

@@ -7,6 +7,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 
 type: textbox_large
 max_length_in_words: 200

package/frameworks/g-cloud-13/questions/services/ongoingSupportServices.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 
 type: checkboxes
 options:

package/frameworks/g-cloud-13/questions/services/planningService.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 followup:
   planningServiceDescription:
     - true

package/frameworks/g-cloud-13/questions/services/planningServiceCompatibility.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 followup:
   planningServiceCompatibilityList:
     - true

package/frameworks/g-cloud-13/questions/services/planningServiceCompatibilityList.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 
 type: list
 list_item_name: hosting or software service

package/frameworks/g-cloud-13/questions/services/planningServiceDescription.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 
 type: textbox_large
 max_length_in_words: 200

package/frameworks/g-cloud-13/questions/services/publicSectorNetworksTypes.yml

@@ -18,6 +18,7 @@ options:
     value: pnn
   - label: NHS Network (N3)
     value: n3
+    filter_ignore: true
   - label: Joint Academic Network (JANET)
     value: janet
   - label: Scottish Wide Area Network (SWAN)

package/frameworks/g-cloud-13/questions/services/securityTesting.yml

@@ -15,6 +15,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 followup:
   securityTestingWhat:
     - true

package/frameworks/g-cloud-13/questions/services/securityTestingAccreditations.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 followup:
   securityTestingAccreditationsOther:
     - other

package/frameworks/g-cloud-13/questions/services/securityTestingAccreditationsOther.yml

@@ -6,6 +6,7 @@ depends:
   - "on": lot
     being:
       - cloud-support
+      - cloud-professional
 
 type: list
 list_item_name: security certification