ccs-digitalmarketplace-frameworks 4.11.4 → 4.11.6

package/frameworks/g-cloud-15/manifests/edit_service.yml

@@ -22,3 +22,8 @@
   editable: True
   questions:
     - multiqServiceFeaturesAndBenefitsHostingAndSoftware
+
+- name: Documents
+  editable: True
+  questions:
+    - serviceDefinitionDocumentURL

package/frameworks/g-cloud-15/manifests/edit_service_as_admin.yml

@@ -59,6 +59,7 @@
 - name: Scaling
   editable: True
   questions:
+    - independenceOfResources
     - multiqUsageNotifications
 
 - name: Data-in-transit protection
@@ -90,4 +91,25 @@
 - name: Governance
   editable: True
   questions:
-    - boardLevelServiceSecurity
+    - boardLevelServiceSecurity
+
+- name: Standards and certifications
+  editable: True
+  questions:
+    - multiqStandardsCSASTAR
+    - multiqStandardsPCI
+    - multiqStandardsCyber
+    - multiqAccreditationsOther
+
+- name: Energy efficiency
+  editable: True
+  questions:
+    - multiqEnergyEfficiency
+
+- name: Documents
+  editable: True
+  questions:
+    - serviceDefinitionDocumentURL
+    - termsAndConditionsDocumentURL
+    - pricingDocumentURL
+    - sfiaRateDocumentURL

package/frameworks/g-cloud-15/manifests/edit_submission.yml

@@ -74,6 +74,7 @@
   editable: False
   edit_questions: True
   questions:
+    - independenceOfResources
     - multiqUsageNotifications
 
 - name: Data-in-transit protection
@@ -110,4 +111,28 @@
   editable: False
   edit_questions: True
   questions:
-    - boardLevelServiceSecurity
+    - boardLevelServiceSecurity
+
+- name: Standards and certifications
+  editable: False
+  edit_questions: True
+  questions:
+    - multiqStandardsCSASTAR
+    - multiqStandardsPCI
+    - multiqStandardsCyber
+    - multiqAccreditationsOther
+
+- name: Energy efficiency
+  editable: False
+  edit_questions: True
+  questions:
+    - multiqEnergyEfficiency
+
+- name: Documents
+  editable: False
+  edit_questions: True
+  questions:
+    - serviceDefinitionDocumentURL
+    - termsAndConditionsDocumentURL
+    - pricingDocumentURL
+    - sfiaRateDocumentURL

package/frameworks/g-cloud-15/metadata/copy_services.yml

@@ -44,7 +44,6 @@ questions_to_exclude:
   - howLongSystemLogsStored
   - incidentManagementApproach
   - incidentManagementType
-  - independenceOfResources
   - informationSecurityPoliciesAndProcesses
   - installation
   - installationCompatibleOperatingSystems

package/frameworks/g-cloud-15/questions/services/accreditationsOther.yml

@@ -0,0 +1,17 @@
+name: Other security certifications
+question: Do you have any other security certifications that cover this service?
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+followup:
+  accreditationsOtherList:
+    - true
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: Select yes if you have any other security certifications.

package/frameworks/g-cloud-15/questions/services/accreditationsOtherList.yml

@@ -0,0 +1,22 @@
+name: Any other security certifications
+question: What other security certifications do you have?
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+list_item_name: security certification
+type: list
+
+validations:
+  - name: answer_required
+    message: Enter a security certification.
+  - name: under_10_words
+    message: Each security certification must be 10 words or fewer.
+  - name: max_items_limit
+    message: You must have 10 or fewer security certifications.
+  - name: under_character_limit
+    message: Each security certification must be 100 characters or fewer.

package/frameworks/g-cloud-15/questions/services/energyEfficientDatacentres.yml

@@ -0,0 +1,19 @@
+name: Energy-efficient datacentres
+question: Do your datacentres adhere to the EU code of conduct for energy-efficient datacentres?
+question_advice: >
+  Read about the <a href="https://joint-research-centre.ec.europa.eu/energy-efficiency/energy-efficiency-products/code-conduct-ict/code-conduct-energy-efficiency-data-centres_en" target="_blank" rel="noopener noreferrer">EU code of conduct for energy-efficient datacentres (link opens in a new tab)</a>.
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+followup:
+  energyEfficientDatacentresDescription:
+    - true
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: Select yes if your datacentres adhere to the EU code of conduct.

package/frameworks/g-cloud-15/questions/services/energyEfficientDatacentresDescription.yml

@@ -0,0 +1,20 @@
+name: Description of energy efficient datacentres
+question: Describe how your datacentres adhere to the EU Code of Conduct for Energy Efficient datacentres
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter description.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-15/questions/services/independenceOfResources.yml

@@ -0,0 +1,19 @@
+name: Independence of resources
+question: How do you guarantee users aren’t affected by the demand other users are placing on your service?
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: textbox_large
+max_length_in_words: 100
+
+validations:
+  - name: answer_required
+    message: Enter description.
+  - name: under_100_words
+    message: Description must be 100 words or fewer.
+  - name: under_character_limit
+    message: Description must be 1000 characters or fewer.

package/frameworks/g-cloud-15/questions/services/multiqAccreditationsOther.yml

@@ -0,0 +1,13 @@
+name: Other security certifications
+question: Other security certifications
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: multiquestion
+questions:
+  - accreditationsOther
+  - accreditationsOtherList

package/frameworks/g-cloud-15/questions/services/multiqEnergyEfficiency.yml

@@ -0,0 +1,13 @@
+name: Energy efficiency
+question: Energy efficiency
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: multiquestion
+questions:
+  - energyEfficientDatacentres
+  - energyEfficientDatacentresDescription

package/frameworks/g-cloud-15/questions/services/multiqStandardsCSASTAR.yml

@@ -0,0 +1,15 @@
+name: CSA STAR certification
+question: CSA STAR certification
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: multiquestion
+questions:
+  - standardsCSASTAR
+  - standardsCSASTARWhen
+  - standardsCSASTARLevel
+  - standardsCSASTARExclusions

package/frameworks/g-cloud-15/questions/services/multiqStandardsCyber.yml

@@ -0,0 +1,13 @@
+name: Cyber essentials
+question: Cyber essentials
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: multiquestion
+questions:
+  - standardsCyberEssentials
+  - standardsCyberEssentialsPlus

package/frameworks/g-cloud-15/questions/services/multiqStandardsPCI.yml

@@ -0,0 +1,15 @@
+name: PCI certification
+question: PCI certification
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: multiquestion
+questions:
+  - standardsPCI
+  - standardsPCIWho
+  - standardsPCIWhen
+  - standardsPCIExclusions

package/frameworks/g-cloud-15/questions/services/pricingDocumentURL.yml

@@ -0,0 +1,37 @@
+name: Pricing document
+question: Add your pricing document
+hint: >
+  <p class="govuk-body">This document will not be indexed by search on the Digital Marketplace.</p>
+  <p class="govuk-body">Your document should:</p>
+  <ul class="govuk-list govuk-list--bullet">
+    <li>be an Open Document Format (ODF) or PDF/A</li>
+    <li>have a maximum file size of 5MB</li>
+    <li>meet accessibility standards</li>
+  </ul>
+  <p class="govuk-body">
+    <a class="govuk-link" target="_blank" rel="noopener noreferrer" href="https://www.gov.uk/guidance/how-to-publish-on-gov-uk/accessible-pdfs">Read the guidance on accessible documents (link opens in a new tab)</a>.
+  </p>
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: upload
+
+file_settings:
+  name: pricing-document
+  max_size: 5
+  file_types:
+    - open_document
+
+validations:
+  - name: answer_required
+    message: Select a file.
+  - name: file_is_valid_format
+    message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
+  - name: file_is_less_than_5mb
+    message: The file must be smaller than 5MB.
+  - name: file_can_be_saved
+    message: The selected file could not be uploaded - try again.

package/frameworks/g-cloud-15/questions/services/serviceDefinitionDocumentURL.yml

@@ -0,0 +1,39 @@
+name: Service definition document
+question: Add your service definition document
+question_advice: >
+  Read the <a href="https://www.gov.uk/guidance/g-cloud-suppliers-guide" target="_blank" rel="noopener noreferrer">suppliers’ guide (opens in new tab)</a> for guidance on what to include.
+hint: >
+  <p class="govuk-body">This document will not be indexed by search on the Digital Marketplace.</p>
+  <p class="govuk-body">Your document should:</p>
+  <ul class="govuk-list govuk-list--bullet">
+    <li>be an Open Document Format (ODF) or PDF/A</li>
+    <li>have a maximum file size of 5MB</li>
+    <li>meet accessibility standards</li>
+  </ul>
+  <p class="govuk-body">
+    <a class="govuk-link" target="_blank" rel="noopener noreferrer" href="https://www.gov.uk/guidance/how-to-publish-on-gov-uk/accessible-pdfs">Read the guidance on accessible documents (link opens in a new tab)</a>.
+  </p>
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: upload
+
+file_settings:
+  name: service-definition-document
+  max_size: 5
+  file_types:
+    - open_document
+
+validations:
+  - name: answer_required
+    message: Select a file.
+  - name: file_is_valid_format
+    message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
+  - name: file_is_less_than_5mb
+    message: The file must be smaller than 5MB.
+  - name: file_can_be_saved
+    message: The selected file could not be uploaded - try again.

package/frameworks/g-cloud-15/questions/services/sfiaRateDocumentURL.yml

@@ -0,0 +1,36 @@
+name: Skills Framework for the Information Age rate card
+question: Add your Skills Framework for the Information Age (SFIA) rate card
+hint: >
+  <p class="govuk-body">This document will not be indexed by search on the Digital Marketplace.</p>
+  <p class="govuk-body">Your document should:</p>
+  <ul class="govuk-list govuk-list--bullet">
+    <li>be an Open Document Format (ODF) or PDF/A</li>
+    <li>have a maximum file size of 5MB</li>
+    <li>meet accessibility standards</li>
+  </ul>
+  <p class="govuk-body">
+    <a class="govuk-link" target="_blank" rel="noopener noreferrer" href="https://www.gov.uk/guidance/how-to-publish-on-gov-uk/accessible-pdfs">Read the guidance on accessible documents (link opens in a new tab)</a>.
+  </p>
+
+optional: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: upload
+
+file_settings:
+  name: sfia-rate-card
+  max_size: 5
+  file_types:
+    - open_document
+
+validations:
+  - name: file_is_valid_format
+    message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
+  - name: file_is_less_than_5mb
+    message: The file must be smaller than 5MB.
+  - name: file_can_be_saved
+    message: The selected file could not be uploaded - try again.

package/frameworks/g-cloud-15/questions/services/standardsCSASTAR.yml

@@ -0,0 +1,23 @@
+name: CSA STAR certification
+question: >
+  Do you have a current CSA Security, Trust & Assurance Registry (STAR) certification that covers the security of
+  your service?
+filter_label: CSA STAR (service security)
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+followup:
+  standardsCSASTARWhen:
+    - true
+  standardsCSASTARLevel:
+    - true
+  standardsCSASTARExclusions:
+    - true
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: Select yes if you have a current CSA STAR certification.

package/frameworks/g-cloud-15/questions/services/standardsCSASTARExclusions.yml

@@ -0,0 +1,20 @@
+name: What the CSA STAR doesn’t cover
+question: What parts of your service are not covered by your CSA STAR certification?
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by CSA STAR certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-15/questions/services/standardsCSASTARLevel.yml

@@ -0,0 +1,26 @@
+name: CSA STAR certification level
+question: What level is the certification?
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: radios
+options:
+  - label: "Level 1: CSA STAR Self-Assessment"
+    value: level_1_csa_star_self_assessment
+  - label: "Level 2: CSA STAR Attestation"
+    value: level_2_csa_star_attestation
+  - label: "Level 3: CSA STAR Certification"
+    value: level_3_csa_star_certification
+  - label: "Level 4: CSA C-STAR Assessment"
+    value: level_4_csa_cstar_assessment
+  - label: "Level 5: CSA STAR Continuous Monitoring"
+    value: level_5_csa_star_continuous_monitoring
+
+validations:
+  - name: answer_required
+    message: Select the level of CSA STAR certification.

package/frameworks/g-cloud-15/questions/services/standardsCSASTARWhen.yml

@@ -0,0 +1,18 @@
+name: CSA STAR accreditation date
+question: When was the certification accredited?
+hint: eg 31/12/2016
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: text
+
+validations:
+  - name: answer_required
+    message: Enter the accreditation date.
+  - name: under_character_limit
+    message: Your accreditation date must be 50 characters or fewer.

package/frameworks/g-cloud-15/questions/services/standardsCyberEssentials.yml

@@ -0,0 +1,14 @@
+name: Cyber essentials
+question: Do you have a current Cyber Essentials certification?
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: Select yes if you have any other security certifications.

package/frameworks/g-cloud-15/questions/services/standardsCyberEssentialsPlus.yml

@@ -0,0 +1,14 @@
+name: Cyber essentials plus
+question: Do you have a current Cyber Essentials Plus certification?
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: Select yes if you have any other security certifications.

package/frameworks/g-cloud-15/questions/services/standardsPCI.yml

@@ -0,0 +1,22 @@
+name: PCI certification
+question: Do you have a current Payment Card Industry Data Security Standard (PCI DSS) certification?
+filter_label: PCI DSS (payment card security)
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+followup:
+  standardsPCIWho:
+    - true
+  standardsPCIWhen:
+    - true
+  standardsPCIExclusions:
+    - true
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: Select yes if you have a current PCI DSS certification.

package/frameworks/g-cloud-15/questions/services/standardsPCIExclusions.yml

@@ -0,0 +1,20 @@
+name: What the PCI DSS doesn’t cover
+question: What is not covered by your PCI DSS certification?
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: textbox_large
+max_length_in_words: 200
+
+validations:
+  - name: answer_required
+    message: Enter the parts of your service not covered by PCI DSS certification.
+  - name: under_200_words
+    message: Description must be 200 words or fewer.
+  - name: under_character_limit
+    message: Description must be 2000 characters or fewer.

package/frameworks/g-cloud-15/questions/services/standardsPCIWhen.yml

@@ -0,0 +1,18 @@
+name: PCI DSS accreditation date
+question: When was the certification accredited?
+hint: eg 31/12/2016
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: text
+
+validations:
+  - name: answer_required
+    message: Enter the accreditation date.
+  - name: under_character_limit
+    message: Your accreditation date must be 50 characters or fewer.

package/frameworks/g-cloud-15/questions/services/standardsPCIWho.yml

@@ -0,0 +1,20 @@
+name: Who accredited the PCI DSS certification
+question: Who accredited you?
+
+hidden: true
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: text
+max_length_in_words: 10
+
+validations:
+  - name: answer_required
+    message: Enter the accreditor name.
+  - name: under_10_words
+    message: Accreditor name must be 10 words or fewer.
+  - name: under_character_limit
+    message: Accreditor name must be 100 characters or fewer.

package/frameworks/g-cloud-15/questions/services/termsAndConditionsDocumentURL.yml

@@ -0,0 +1,37 @@
+name: Terms and conditions document
+question: Add your terms and conditions document
+hint: >
+  <p class="govuk-body">This document will not be indexed by search on the Digital Marketplace.</p>
+  <p class="govuk-body">Your document should:</p>
+  <ul class="govuk-list govuk-list--bullet">
+    <li>be an Open Document Format (ODF) or PDF/A</li>
+    <li>have a maximum file size of 5MB</li>
+    <li>meet accessibility standards</li>
+  </ul>
+  <p class="govuk-body">
+    <a class="govuk-link" target="_blank" rel="noopener noreferrer" href="https://www.gov.uk/guidance/how-to-publish-on-gov-uk/accessible-pdfs">Read the guidance on accessible documents (link opens in a new tab)</a>.
+  </p>
+
+depends:
+  - "on": lot
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: upload
+
+file_settings:
+  name: terms-and-conditions
+  max_size: 5
+  file_types:
+    - open_document
+
+validations:
+  - name: answer_required
+    message: Select a file.
+  - name: file_is_valid_format
+    message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
+  - name: file_is_less_than_5mb
+    message: The file must be smaller than 5MB.
+  - name: file_can_be_saved
+    message: The selected file could not be uploaded - try again.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccs-digitalmarketplace-frameworks",
-  "version": "4.11.4",
+  "version": "4.11.6",
   "description": "Data files for Digital Marketplace’s procurement frameworks",
   "repository": {
     "type": "git",