ccs-digitalmarketplace-frameworks 5.0.3 → 5.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/frameworks/g-cloud-15/manifests/edit_additional_lot_questions.yml +25 -22
- package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouAReseller1a.yml +29 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouAReseller1b.yml +32 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouReliantForSomeAccreditations.yml +19 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceCyberEssentialsCertification.yml +9 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceProcessesToProvideUserSupportCloudSoftware.yml +13 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceProcessesToProvideUserSupportCloudSupport.yml +13 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/haveIndustryStandardDataSanitisationProcess.yml +9 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/howAreStaffSecurityChecksPerformed.yml +15 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/howOftenWillPenTestingBeConducted.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/iso14001certificationURL.yml +23 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/iso27001certificationURL.yml +23 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/iso27017certificationURL.yml +23 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/iso27018certificationURL.yml +23 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/iso9001certificationURL.yml +23 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/knowTheLocations.yml +13 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/makeSureStaffHaveSecurityClearance.yml +13 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHaveInPlaceCyberEssentials.yml +13 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowDoYouManageStaffSecurityClearanceChecks.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideAssetProtection.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideSataSanitisation.yml +13 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideUserSupportCloudSoftware.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideUserSupportCloudSupport.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1a.yml +16 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1b.yml +17 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqWhatFrequencyWillPenTestingBeConducted.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqWhatLevelOfSecurityClearance.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/whatLevelOfStaffSecurityClearance.yml +17 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/whenIsUserSupportAvailable.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/whereIsDataStoredAndProcessed.yml +14 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/willPenTestingBeConducted.yml +13 -0
- package/frameworks/g-cloud-15/questions/additional-lot-questions/willYourOrgPerformSecurityChecks.yml +13 -0
- package/package.json +1 -1
- package/frameworks/g-cloud-15/questions/additional-lot-questions/commitmentForFuture.yml +0 -51
- package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSupplierContractManagerContact.yml +0 -18
- package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerCommitment.yml +0 -28
- package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerContactEmail.yml +0 -12
- package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerContactJobTitle.yml +0 -10
- package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerContactName.yml +0 -10
- package/frameworks/g-cloud-15/questions/additional-lot-questions/understandBuyerIncludeQualityRequirement.yml +0 -20
- package/frameworks/g-cloud-15/questions/additional-lot-questions/understandCCSBuyersEvaluateQualityReq.yml +0 -20
- package/frameworks/g-cloud-15/questions/additional-lot-questions/understandCCSEvaluateQualityResponse.yml +0 -20
- package/frameworks/g-cloud-15/questions/additional-lot-questions/understandObligationToMeetQualityReq.yml +0 -20
|
@@ -1,36 +1,39 @@
|
|
|
1
1
|
-
|
|
2
|
-
name: "
|
|
3
|
-
slug:
|
|
2
|
+
name: "Selection questions"
|
|
3
|
+
slug: selection-questions
|
|
4
4
|
editable: True
|
|
5
|
-
description: |
|
|
6
|
-
The purpose of this section is to confirm that suppliers understand the concept of Quality Requirements and its relevance and importance to the G-Cloud 15 Framework.
|
|
7
|
-
|
|
8
|
-
The following questions are PASS/FAIL. If you respond ‘No’ to any of these questions, your Framework Tender Response will be disqualified. Please refer to Attachment 2.
|
|
9
5
|
questions:
|
|
10
|
-
-
|
|
11
|
-
-
|
|
12
|
-
- understandBuyerIncludeQualityRequirement
|
|
13
|
-
- understandObligationToMeetQualityReq
|
|
14
|
-
|
|
6
|
+
- multiqSelectionQuestions1a
|
|
7
|
+
- multiqSelectionQuestions1b
|
|
15
8
|
|
|
16
9
|
-
|
|
17
|
-
name: "
|
|
18
|
-
slug:
|
|
10
|
+
name: "Award criteria for Lots 2a and 2b"
|
|
11
|
+
slug: award-criteria-2a-and-2b
|
|
19
12
|
editable: True
|
|
20
13
|
description: |
|
|
21
|
-
|
|
14
|
+
CCS requires you to confirm your understanding of providing user support and asset protection for SaaS services is essential for successful delivery..
|
|
22
15
|
|
|
23
|
-
|
|
16
|
+
In order to satisfy the award criteria, you must fully address each of the sub-criteria
|
|
17
|
+
|
|
18
|
+
Please select the processes that you will have in place to effectively provide user support, using email or ticketing support, phone support or web chat support, and asset Protection by confirming where service user data is processed and stored, frequency of penetration testing and your data sanitisation process (in accordance with the Service Questions that will be published on the Digital Marketplace)
|
|
24
19
|
questions:
|
|
25
|
-
-
|
|
20
|
+
- multiqHowYouWillProvideUserSupportCloudSoftware
|
|
21
|
+
- multiqHowYouWillProvideAssetProtection
|
|
22
|
+
- multiqWhatFrequencyWillPenTestingBeConducted
|
|
23
|
+
- multiqHowYouWillProvideSataSanitisation
|
|
26
24
|
|
|
27
25
|
-
|
|
28
|
-
name: "
|
|
29
|
-
slug:
|
|
26
|
+
name: "Award criteria for Lot 3"
|
|
27
|
+
slug: award-criteria-3
|
|
30
28
|
editable: True
|
|
31
29
|
description: |
|
|
32
|
-
|
|
33
|
-
|
|
30
|
+
CCS requires you to confirm your understanding of providing user support, staff security and cyber security certification for Cloud Support services is essential for successful delivery
|
|
31
|
+
|
|
32
|
+
In order to satisfy the award criteria, you must fully address each of the sub-criteria
|
|
33
|
+
|
|
34
|
+
Please select the processes that you will have in place to effectively provide user support, using email or ticketing support, phone support or web chat support, and staff security by confirming how staff security checks are performed, and what level of security checks will be performed, and confirming your approach to cyber security certification, (in accordance with the Service Questions that will be published on the Digital Marketplace)
|
|
34
35
|
questions:
|
|
35
|
-
|
|
36
|
-
|
|
36
|
+
- multiqHowYouWillProvideUserSupportCloudSupport
|
|
37
|
+
- multiqHowDoYouManageStaffSecurityClearanceChecks
|
|
38
|
+
- multiqWhatLevelOfSecurityClearance
|
|
39
|
+
- multiqHaveInPlaceCyberEssentials
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
id: areYouAReseller
|
|
2
|
+
name: Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure
|
|
3
|
+
question: >
|
|
4
|
+
The specification for this Lot requires that the Supplier is in sole control of the infrastructure that underlies its Services or can evidence that they are an accredited reseller of such infrastructure.
|
|
5
|
+
|
|
6
|
+
Confirm whether you are bidding to offer IaaS and/or PaaS as a reseller
|
|
7
|
+
question_advice: >
|
|
8
|
+
If you will offer both proprietary and resold services as part of your core IaaS and PaaS offering, select ‘Reseller’.
|
|
9
|
+
|
|
10
|
+
If you may use another’s service resold if it is ancillary to the core IaaS or PaaS service, but will provide the core IaaS or PaaS services entirely without reselling in the normal operation of your services, select ‘Sole Control’.
|
|
11
|
+
|
|
12
|
+
followup:
|
|
13
|
+
iso9001certificationURL:
|
|
14
|
+
- reseller
|
|
15
|
+
- sole-control
|
|
16
|
+
areYouReliantForSomeAccreditations:
|
|
17
|
+
- reseller
|
|
18
|
+
- sole-control
|
|
19
|
+
|
|
20
|
+
type: radios
|
|
21
|
+
options:
|
|
22
|
+
- label: Reseller
|
|
23
|
+
value: reseller
|
|
24
|
+
- label: Sole Control of the Infrastructure
|
|
25
|
+
value: sole-control
|
|
26
|
+
|
|
27
|
+
validations:
|
|
28
|
+
- name: answer_required
|
|
29
|
+
message: You must select if you have in place processes to provide user support
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
id: areYouAReseller
|
|
2
|
+
name: Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure
|
|
3
|
+
question: >
|
|
4
|
+
The specification for this Lot requires that the Supplier is in sole control of the infrastructure that underlies its Services or can evidence that they are an accredited reseller of such infrastructure.
|
|
5
|
+
|
|
6
|
+
Confirm whether you are bidding to offer IaaS and/or PaaS as a reseller
|
|
7
|
+
question_advice: >
|
|
8
|
+
If you will offer both proprietary and resold services as part of your core IaaS and PaaS offering, select ‘Reseller’.
|
|
9
|
+
|
|
10
|
+
If you may use another’s service resold if it is ancillary to the core IaaS or PaaS service, but will provide the core IaaS or PaaS services entirely without reselling in the normal operation of your services, select ‘Sole Control’.
|
|
11
|
+
|
|
12
|
+
followup:
|
|
13
|
+
iso9001certificationURL:
|
|
14
|
+
- reseller
|
|
15
|
+
- sole-control
|
|
16
|
+
areYouReliantForSomeAccreditations:
|
|
17
|
+
- reseller
|
|
18
|
+
- sole-control
|
|
19
|
+
iso27018certificationURL:
|
|
20
|
+
- reseller
|
|
21
|
+
- sole-control
|
|
22
|
+
|
|
23
|
+
type: radios
|
|
24
|
+
options:
|
|
25
|
+
- label: Reseller
|
|
26
|
+
value: reseller
|
|
27
|
+
- label: Sole Control of the Infrastructure
|
|
28
|
+
value: sole-control
|
|
29
|
+
|
|
30
|
+
validations:
|
|
31
|
+
- name: answer_required
|
|
32
|
+
message: You must select if you have in place processes to provide user support
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
|
|
2
|
+
name: Are you reliant on the Cloud Service Provider for some accreditations
|
|
3
|
+
question: Are you reliant on the Cloud Service Provider for some accreditations required by the specification for this Lot, such as cloud security related ISOs?
|
|
4
|
+
question_advice: This means that because the services will be resold in their entirety, the service may be accredited in the original supplier’s name, but you will not need to hold that accreditation directly
|
|
5
|
+
|
|
6
|
+
type: boolean
|
|
7
|
+
hidden: true
|
|
8
|
+
|
|
9
|
+
followup:
|
|
10
|
+
iso14001certificationURL:
|
|
11
|
+
- true
|
|
12
|
+
iso27001certificationURL:
|
|
13
|
+
- true
|
|
14
|
+
iso27017certificationURL:
|
|
15
|
+
- true
|
|
16
|
+
|
|
17
|
+
validations:
|
|
18
|
+
- name: answer_required
|
|
19
|
+
message: You must select an option
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
|
|
2
|
+
name: Are you prepared to have in place Cyber Essentials certification?
|
|
3
|
+
question: Are you prepared to have in place Cyber Essentials (or equivalent or higher) certification should a Buyer require it?
|
|
4
|
+
|
|
5
|
+
type: boolean
|
|
6
|
+
|
|
7
|
+
validations:
|
|
8
|
+
- name: answer_required
|
|
9
|
+
message: You must select if you are you prepared to have in place Cyber Essentials certification
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
|
|
2
|
+
name: Have in place processes to provide user support
|
|
3
|
+
question: Will your organisation have in place processes to provide user support for the SaaS services in lots 2a and lot 2b?
|
|
4
|
+
|
|
5
|
+
followup:
|
|
6
|
+
whenIsUserSupportAvailable:
|
|
7
|
+
- true
|
|
8
|
+
|
|
9
|
+
type: boolean
|
|
10
|
+
|
|
11
|
+
validations:
|
|
12
|
+
- name: answer_required
|
|
13
|
+
message: You must select if you have in place processes to provide user support
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
|
|
2
|
+
name: Have in place processes to provide user support
|
|
3
|
+
question: Will your organisation have in place processes to provide user support for the Cloud Support services in lot 3?
|
|
4
|
+
|
|
5
|
+
followup:
|
|
6
|
+
whenIsUserSupportAvailable:
|
|
7
|
+
- true
|
|
8
|
+
|
|
9
|
+
type: boolean
|
|
10
|
+
|
|
11
|
+
validations:
|
|
12
|
+
- name: answer_required
|
|
13
|
+
message: You must select if you have in place processes to provide user support
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
|
|
2
|
+
name: Do you have a industry standard data sanitisation process?
|
|
3
|
+
question: Do you have a industry standard data sanitisation process, such as explicit overwriting of storage before reallocation / Secure Erase, degaussing, or physical destruction / hardware containing data is completely destroyed?
|
|
4
|
+
|
|
5
|
+
type: boolean
|
|
6
|
+
|
|
7
|
+
validations:
|
|
8
|
+
- name: answer_required
|
|
9
|
+
message: You must select if you have a industry standard data sanitisation process
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
name: How are staff security checks performed?
|
|
2
|
+
question: How are staff security checks performed?
|
|
3
|
+
|
|
4
|
+
hidden: true
|
|
5
|
+
|
|
6
|
+
type: radios
|
|
7
|
+
options:
|
|
8
|
+
- label: Staff screening performed which conforms to BS7858:2019
|
|
9
|
+
value: conforms-to-bs
|
|
10
|
+
- label: Staff screening performed but doesn’t conform with BS7858:2019
|
|
11
|
+
value: does-not-conform-to-bs
|
|
12
|
+
|
|
13
|
+
validations:
|
|
14
|
+
- name: answer_required
|
|
15
|
+
message: You must select how are staff security checks performed
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: How often will penetration testing be conducted on the SaaS service?
|
|
2
|
+
question: How often will penetration testing be conducted on the SaaS service?
|
|
3
|
+
|
|
4
|
+
hidden: true
|
|
5
|
+
|
|
6
|
+
type: radios
|
|
7
|
+
options:
|
|
8
|
+
- label: At least every 6 months
|
|
9
|
+
- label: At least once a year
|
|
10
|
+
- label: Less than once a year
|
|
11
|
+
|
|
12
|
+
validations:
|
|
13
|
+
- name: answer_required
|
|
14
|
+
message: You must select how often will penetration testing be conducted
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
|
|
2
|
+
name: ISO 14001 certification
|
|
3
|
+
question: Provide your ISO 14001 certification
|
|
4
|
+
hint: This file must be in an open document format and have a maximum file size of 5MB
|
|
5
|
+
|
|
6
|
+
type: upload
|
|
7
|
+
hidden: true
|
|
8
|
+
|
|
9
|
+
file_settings:
|
|
10
|
+
name: iso-14001-certification
|
|
11
|
+
max_size: 5
|
|
12
|
+
file_types:
|
|
13
|
+
- open_document
|
|
14
|
+
|
|
15
|
+
validations:
|
|
16
|
+
- name: answer_required
|
|
17
|
+
message: You must upload your ISO 14001 certification
|
|
18
|
+
- name: file_is_valid_format
|
|
19
|
+
message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
|
|
20
|
+
- name: file_is_less_than_5mb
|
|
21
|
+
message: The file must be smaller than 5MB.
|
|
22
|
+
- name: file_can_be_saved
|
|
23
|
+
message: The selected file could not be uploaded - try again.
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
|
|
2
|
+
name: ISO 27001 certification
|
|
3
|
+
question: Provide your ISO 27001 certification
|
|
4
|
+
hint: This file must be in an open document format and have a maximum file size of 5MB
|
|
5
|
+
|
|
6
|
+
type: upload
|
|
7
|
+
hidden: true
|
|
8
|
+
|
|
9
|
+
file_settings:
|
|
10
|
+
name: iso-27001-certification
|
|
11
|
+
max_size: 5
|
|
12
|
+
file_types:
|
|
13
|
+
- open_document
|
|
14
|
+
|
|
15
|
+
validations:
|
|
16
|
+
- name: answer_required
|
|
17
|
+
message: You must upload your ISO 27001 certification
|
|
18
|
+
- name: file_is_valid_format
|
|
19
|
+
message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
|
|
20
|
+
- name: file_is_less_than_5mb
|
|
21
|
+
message: The file must be smaller than 5MB.
|
|
22
|
+
- name: file_can_be_saved
|
|
23
|
+
message: The selected file could not be uploaded - try again.
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
|
|
2
|
+
name: ISO 27017 certification
|
|
3
|
+
question: Provide your ISO 27017 certification
|
|
4
|
+
hint: This file must be in an open document format and have a maximum file size of 5MB
|
|
5
|
+
|
|
6
|
+
type: upload
|
|
7
|
+
hidden: true
|
|
8
|
+
|
|
9
|
+
file_settings:
|
|
10
|
+
name: iso-27017-certification
|
|
11
|
+
max_size: 5
|
|
12
|
+
file_types:
|
|
13
|
+
- open_document
|
|
14
|
+
|
|
15
|
+
validations:
|
|
16
|
+
- name: answer_required
|
|
17
|
+
message: You must upload your ISO 27017 certification
|
|
18
|
+
- name: file_is_valid_format
|
|
19
|
+
message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
|
|
20
|
+
- name: file_is_less_than_5mb
|
|
21
|
+
message: The file must be smaller than 5MB.
|
|
22
|
+
- name: file_can_be_saved
|
|
23
|
+
message: The selected file could not be uploaded - try again.
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
|
|
2
|
+
name: ISO 27018 certification
|
|
3
|
+
question: Provide your ISO 27018 certification
|
|
4
|
+
hint: This file must be in an open document format and have a maximum file size of 5MB
|
|
5
|
+
|
|
6
|
+
type: upload
|
|
7
|
+
hidden: true
|
|
8
|
+
|
|
9
|
+
file_settings:
|
|
10
|
+
name: iso-27018-certification
|
|
11
|
+
max_size: 5
|
|
12
|
+
file_types:
|
|
13
|
+
- open_document
|
|
14
|
+
|
|
15
|
+
validations:
|
|
16
|
+
- name: answer_required
|
|
17
|
+
message: You must upload your ISO 27018 certification
|
|
18
|
+
- name: file_is_valid_format
|
|
19
|
+
message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
|
|
20
|
+
- name: file_is_less_than_5mb
|
|
21
|
+
message: The file must be smaller than 5MB.
|
|
22
|
+
- name: file_can_be_saved
|
|
23
|
+
message: The selected file could not be uploaded - try again.
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
|
|
2
|
+
name: ISO 9001 certification
|
|
3
|
+
question: Provide your ISO 9001 certification
|
|
4
|
+
hint: This file must be in an open document format and have a maximum file size of 5MB
|
|
5
|
+
|
|
6
|
+
type: upload
|
|
7
|
+
hidden: true
|
|
8
|
+
|
|
9
|
+
file_settings:
|
|
10
|
+
name: iso-9001-certification
|
|
11
|
+
max_size: 5
|
|
12
|
+
file_types:
|
|
13
|
+
- open_document
|
|
14
|
+
|
|
15
|
+
validations:
|
|
16
|
+
- name: answer_required
|
|
17
|
+
message: You must upload your ISO 9001 certification
|
|
18
|
+
- name: file_is_valid_format
|
|
19
|
+
message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
|
|
20
|
+
- name: file_is_less_than_5mb
|
|
21
|
+
message: The file must be smaller than 5MB.
|
|
22
|
+
- name: file_can_be_saved
|
|
23
|
+
message: The selected file could not be uploaded - try again.
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
|
|
2
|
+
name: Know the location where the service user data is stored and processed
|
|
3
|
+
question: Will your organisation know the location where the service user data is stored and processed?
|
|
4
|
+
|
|
5
|
+
followup:
|
|
6
|
+
whereIsDataStoredAndProcessed:
|
|
7
|
+
- true
|
|
8
|
+
|
|
9
|
+
type: boolean
|
|
10
|
+
|
|
11
|
+
validations:
|
|
12
|
+
- name: answer_required
|
|
13
|
+
message: You must select if you know the location where the service user data is stored and processed
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
|
|
2
|
+
name: Are you prepared to make sure your staff have staff security clearance
|
|
3
|
+
question: Are you prepared to make sure your staff have staff security clearance if required by the Buyer?
|
|
4
|
+
|
|
5
|
+
followup:
|
|
6
|
+
whatLevelOfStaffSecurityClearance:
|
|
7
|
+
- true
|
|
8
|
+
|
|
9
|
+
type: boolean
|
|
10
|
+
|
|
11
|
+
validations:
|
|
12
|
+
- name: answer_required
|
|
13
|
+
message: You must select if you are prepared to make sure your staff have staff security clearance
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
name: Are you prepared to have in place Cyber Essentials
|
|
2
|
+
question: If the Buyer requires it are you prepared to have in place Cyber Essentials (or equivalent or higher) certification for your Cloud Support services delivered in lots 3
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm that if a Buyer requires it you will have in place Cyber Essentials (or equivalent or higher) certification for your Cloud Support services, by confirming that you are prepared to have Cyber Essentials (or equivalent or higher) certification in place, in accordance with the Service Questions in the Standards and Certifications section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-support
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- haveInPlaceCyberEssentialsCertification
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: How do you manage staff security clearance checks
|
|
2
|
+
question: How do you manage staff security clearance checks for staff with access to information or connected to the delivery of your Cloud Support services in lot 3
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm the staff security clearance checks that you will have in place for your Cloud Support services, by confirming whether staff security clearance checks are performed, in accordance with the Service Questions in the Staff Security section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-support
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- willYourOrgPerformSecurityChecks
|
|
14
|
+
- howAreStaffSecurityChecksPerformed
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: How you will provide asset protection
|
|
2
|
+
question: How you will provide asset protection for your SaaS services delivered in lots 2a and 2b
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm the asset protection that you will have in place for your SaaS services, by confirming data storage and processing locations, in accordance with the Service Questions in the Asset Protection section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-software
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- knowTheLocations
|
|
14
|
+
- whereIsDataStoredAndProcessed
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
name: How you will provide data sanitisation
|
|
2
|
+
question: How you will provide data sanitisation for your SaaS services delivered in lots 2a and 2b
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm that you will have data sanitisation processes in place for your SaaS services, by confirming if you will have industry standard data sanitisation processes such as explicit overwriting of storage before reallocation / Secure Erase, degaussing, or physical destruction / hardware containing data is completely destroyed, in accordance with the Service Questions in the Asset Protection section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-software
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- haveIndustryStandardDataSanitisationProcess
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: How you will provide user support
|
|
2
|
+
question: How you will provide user support for your SaaS services delivered in lots 2a and 2b
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm the availability of the user support that you will have in place to effectively provide User Support for your SaaS services, using processes such as Email/ticketing support, Phone support or Web chat support, in accordance with the Service Questions in the User Support section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-software
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- haveInPlaceProcessesToProvideUserSupportCloudSoftware
|
|
14
|
+
- whenIsUserSupportAvailable
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: How you will provide user support
|
|
2
|
+
question: How you will provide user support for your Cloud Support services delivered in lot 3
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm the availability of the user support that you will have in place to effectively provide User Support for your Cloud Support services, using processes such as Email/ticketing support, Phone support or Web chat support, in accordance with the Service Questions in the User Support section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-support
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- haveInPlaceProcessesToProvideUserSupportCloudSupport
|
|
14
|
+
- whenIsUserSupportAvailable
|
package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1a.yml
ADDED
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
name: Are you a reseller?
|
|
2
|
+
question: Are you a reseller?
|
|
3
|
+
|
|
4
|
+
depends:
|
|
5
|
+
- "on": route
|
|
6
|
+
being:
|
|
7
|
+
- iaas-and-paas
|
|
8
|
+
|
|
9
|
+
type: multiquestion
|
|
10
|
+
questions:
|
|
11
|
+
- areYouAReseller1a
|
|
12
|
+
- iso9001certificationURL
|
|
13
|
+
- areYouReliantForSomeAccreditations
|
|
14
|
+
- iso14001certificationURL
|
|
15
|
+
- iso27001certificationURL
|
|
16
|
+
- iso27017certificationURL
|
package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1b.yml
ADDED
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
name: Are you a reseller?
|
|
2
|
+
question: Are you a reseller?
|
|
3
|
+
|
|
4
|
+
depends:
|
|
5
|
+
- "on": route
|
|
6
|
+
being:
|
|
7
|
+
- iaas-and-paas-above-official
|
|
8
|
+
|
|
9
|
+
type: multiquestion
|
|
10
|
+
questions:
|
|
11
|
+
- areYouAReseller1b
|
|
12
|
+
- iso9001certificationURL
|
|
13
|
+
- areYouReliantForSomeAccreditations
|
|
14
|
+
- iso14001certificationURL
|
|
15
|
+
- iso27001certificationURL
|
|
16
|
+
- iso27017certificationURL
|
|
17
|
+
- iso27018certificationURL
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: What frequency will penetration testing be conducted
|
|
2
|
+
question: At what frequency will penetration testing be conducted for the SaaS services delivered in lots 2a and 2b
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm the penetration testing frequency that will be applied to the SaaS services, by confirming how often penetration testing occurs, in accordance with the Service Questions in the Asset Protection section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-software
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- willPenTestingBeConducted
|
|
14
|
+
- howOftenWillPenTestingBeConducted
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: What level of security clearance are you prepared to implement
|
|
2
|
+
question: If the Buyer requires it, what level of security clearance are you prepared to implement to make sure your staff have for the Cloud Support services delivered in lot 3
|
|
3
|
+
question_advice: >
|
|
4
|
+
Your response must confirm the maximum level of staff security clearance that you are prepared to have in place for your Cloud Support services, by confirming the level of staff security clearance that you are prepared to have in place, in accordance with the Service Questions in the Staff Security section on the Digital Marketplace
|
|
5
|
+
|
|
6
|
+
depends:
|
|
7
|
+
- "on": route
|
|
8
|
+
being:
|
|
9
|
+
- cloud-support
|
|
10
|
+
|
|
11
|
+
type: multiquestion
|
|
12
|
+
questions:
|
|
13
|
+
- makeSureStaffHaveSecurityClearance
|
|
14
|
+
- whatLevelOfStaffSecurityClearance
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
name: What level of staff security clearance are you prepared to have in place should a Buyer require it?
|
|
2
|
+
question: What level of staff security clearance are you prepared to have in place should a Buyer require it?
|
|
3
|
+
|
|
4
|
+
hidden: true
|
|
5
|
+
|
|
6
|
+
type: radios
|
|
7
|
+
options:
|
|
8
|
+
- label: Up to Developed Vetting (DV)
|
|
9
|
+
value: dv
|
|
10
|
+
- label: Up to Security Clearance (SC)
|
|
11
|
+
value: sc
|
|
12
|
+
- label: Up to Baseline Personnel Security Standard (BPSS)
|
|
13
|
+
value: bpss
|
|
14
|
+
|
|
15
|
+
validations:
|
|
16
|
+
- name: answer_required
|
|
17
|
+
message: You must select what level of staff security clearance are you prepared to have in place
|
package/frameworks/g-cloud-15/questions/additional-lot-questions/whenIsUserSupportAvailable.yml
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: When is user support available?
|
|
2
|
+
question: When is user support available?
|
|
3
|
+
|
|
4
|
+
hidden: true
|
|
5
|
+
|
|
6
|
+
type: radios
|
|
7
|
+
options:
|
|
8
|
+
- label: 24 hours, 7 days a week
|
|
9
|
+
- label: 9 to 5 (UK time), 7 days a week
|
|
10
|
+
- label: 9 to 5 (UK time), Monday to Friday
|
|
11
|
+
|
|
12
|
+
validations:
|
|
13
|
+
- name: answer_required
|
|
14
|
+
message: You must select when is user support is available
|
package/frameworks/g-cloud-15/questions/additional-lot-questions/whereIsDataStoredAndProcessed.yml
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
name: Where is service user data stored and processed?
|
|
2
|
+
question: Where is service user data stored and processed?
|
|
3
|
+
|
|
4
|
+
hidden: true
|
|
5
|
+
|
|
6
|
+
type: checkboxes
|
|
7
|
+
options:
|
|
8
|
+
- label: United Kingdom
|
|
9
|
+
- label: European Economic Area (EEA)
|
|
10
|
+
- label: Other
|
|
11
|
+
|
|
12
|
+
validations:
|
|
13
|
+
- name: answer_required
|
|
14
|
+
message: You must select where is service user data stored and processed
|
package/frameworks/g-cloud-15/questions/additional-lot-questions/willPenTestingBeConducted.yml
ADDED
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
|
|
2
|
+
name: Will penetration testing be conducted?
|
|
3
|
+
question: Will penetration testing be conducted on the SaaS service?
|
|
4
|
+
|
|
5
|
+
followup:
|
|
6
|
+
howOftenWillPenTestingBeConducted:
|
|
7
|
+
- true
|
|
8
|
+
|
|
9
|
+
type: boolean
|
|
10
|
+
|
|
11
|
+
validations:
|
|
12
|
+
- name: answer_required
|
|
13
|
+
message: You must select if you will penetration testing be conducted
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
|
|
2
|
+
name: Will your organisation perform staff security clearance checks
|
|
3
|
+
question: Will your organisation perform staff security clearance checks for staff with access to information or connected to the delivery of your Cloud Support services?
|
|
4
|
+
|
|
5
|
+
followup:
|
|
6
|
+
howAreStaffSecurityChecksPerformed:
|
|
7
|
+
- true
|
|
8
|
+
|
|
9
|
+
type: boolean
|
|
10
|
+
|
|
11
|
+
validations:
|
|
12
|
+
- name: answer_required
|
|
13
|
+
message: You must select if you will your organisation perform staff security clearance checks
|
package/package.json
CHANGED
|
@@ -1,51 +0,0 @@
|
|
|
1
|
-
name: Capabilities you can mobilise
|
|
2
|
-
question: Which of the following capabilities will you be able to mobilise when a call-off contract goes live?
|
|
3
|
-
question_advice: You must select at least one to qualify as a supplier
|
|
4
|
-
hint: Selecting multiple options does not equate to a higher score
|
|
5
|
-
|
|
6
|
-
depends:
|
|
7
|
-
- "on": "route"
|
|
8
|
-
being:
|
|
9
|
-
- isaas
|
|
10
|
-
- saas
|
|
11
|
-
- cloud-support
|
|
12
|
-
type: checkbox_tree
|
|
13
|
-
|
|
14
|
-
item_name:
|
|
15
|
-
singular: capability
|
|
16
|
-
plural: capabilities
|
|
17
|
-
|
|
18
|
-
options:
|
|
19
|
-
- label: Project Management
|
|
20
|
-
options:
|
|
21
|
-
- label: Project Manager (s) with maintained qualification of Prince2 Practitioner
|
|
22
|
-
- label: Project Manager (s) with maintained qualification from the Association for Project Managers
|
|
23
|
-
- label: Project Manager (s) with maintained qualification from the Project Management Institution (e.g. Project Management Professional (PMP) or Certified Associate in Project Management (CAPM))
|
|
24
|
-
- label: Capability with Waterfall methodology
|
|
25
|
-
- label: Capability with Agile methodology
|
|
26
|
-
- label: Capability with Scrum methodology
|
|
27
|
-
- label: Capability with Lean methodology
|
|
28
|
-
- label: Capability with Extreme Programming (XP) methodology
|
|
29
|
-
- label: Capability with PRINCE2 methodology
|
|
30
|
-
- label: Continuous Improvement and Innovation
|
|
31
|
-
options:
|
|
32
|
-
- label: Customer Feedback for Service Improvement. Defined process for systematically gathering and reviewing customer feedback specifically for the purpose of improving products and/or services
|
|
33
|
-
- label: Communication of Product/Service Enhancements. Proactively communicating significant service updates, new feature releases, or relevant roadmap information
|
|
34
|
-
- label: Value Stream Mapping - identify the flow of data and information to target areas for improvement
|
|
35
|
-
- label: PDCA (Plan-Do-Check-Act) - plan improvement, implement changes, check results, and act based on the outcomes
|
|
36
|
-
- label: Lessons Learnt - post contract/project review to learn from successes and failures
|
|
37
|
-
- label: Continuous Monitoring - Continual critical observation of service delivery to detect potential issues and proactively address them
|
|
38
|
-
- label: Benchmarking
|
|
39
|
-
- label: Account Management
|
|
40
|
-
options:
|
|
41
|
-
- label: Contract Management reviews
|
|
42
|
-
- label: Service Level Agreement (SLA)
|
|
43
|
-
- label: Key Performance Indicators (KPI's)
|
|
44
|
-
- label: Escalation Process
|
|
45
|
-
- label: Multi-channel customer service - phone and/or email and/or webchat
|
|
46
|
-
- label: Performance Review Meetings
|
|
47
|
-
- label: Customer Satisfaction Surveys
|
|
48
|
-
|
|
49
|
-
validations:
|
|
50
|
-
- name: answer_required
|
|
51
|
-
message: You must select an option
|
|
@@ -1,18 +0,0 @@
|
|
|
1
|
-
name: "Supplier Contract Manager Contact"
|
|
2
|
-
question: "Provide contact details for the individual who will be your Supplier's Contract Manager."
|
|
3
|
-
|
|
4
|
-
question_advice: If you are unable to state who this may be, enter the details of the person who would be ultimately responsible for delivery of any Contract, or for the relationship with CCS.
|
|
5
|
-
|
|
6
|
-
depends:
|
|
7
|
-
- "on": "route"
|
|
8
|
-
being:
|
|
9
|
-
- isaas
|
|
10
|
-
- saas
|
|
11
|
-
- cloud-support
|
|
12
|
-
|
|
13
|
-
type: multiquestion
|
|
14
|
-
|
|
15
|
-
questions:
|
|
16
|
-
- supplierContractManagerContactName
|
|
17
|
-
- supplierContractManagerContactJobTitle
|
|
18
|
-
- supplierContractManagerContactEmail
|
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
name: Supplier's Contract Manager
|
|
2
|
-
question: Please commit here to having a Supplier's Contract Manager in the organisation to be responsible for delivery of your Project Management and/or Continuous Improvement and/or Innovation and/or Account Management commitment.
|
|
3
|
-
question_advice: If you do not and will not have a Supplier's Contract Manager, and you are not willing to nominate someone to this role, you may state this here, and your Framework Tender Response will be disqualified.
|
|
4
|
-
|
|
5
|
-
depends:
|
|
6
|
-
- "on": "route"
|
|
7
|
-
being:
|
|
8
|
-
- isaas
|
|
9
|
-
- saas
|
|
10
|
-
- cloud-support
|
|
11
|
-
|
|
12
|
-
type: radios
|
|
13
|
-
required_value: "will_have_contract_manager"
|
|
14
|
-
options:
|
|
15
|
-
-
|
|
16
|
-
label: We WILL have a Supplier's Contract Manager in the organisation
|
|
17
|
-
value: "will_have_contract_manager"
|
|
18
|
-
-
|
|
19
|
-
label: We will NOT have a Supplier's Contract Manager in the organisation
|
|
20
|
-
value: "will_not_contract_manager"
|
|
21
|
-
|
|
22
|
-
validations:
|
|
23
|
-
-
|
|
24
|
-
name: not_required_value
|
|
25
|
-
message: You must confirm you will have a Supplier's Contract Manager in the organisation.
|
|
26
|
-
-
|
|
27
|
-
name: answer_required
|
|
28
|
-
message: You must confirm you will have a Supplier's Contract Manager in the organisation.
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
name: Job title
|
|
2
|
-
question: Job title
|
|
3
|
-
type: text
|
|
4
|
-
max_length_in_characters: 200
|
|
5
|
-
|
|
6
|
-
validations:
|
|
7
|
-
- name: answer_required
|
|
8
|
-
message: "You must provide a job title with a maximum of 200 characters"
|
|
9
|
-
- name: under_character_limit
|
|
10
|
-
message: "You must provide a job title with a maximum of 200 characters"
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
name: Name
|
|
2
|
-
question: Name
|
|
3
|
-
type: text
|
|
4
|
-
max_length_in_characters: 200
|
|
5
|
-
|
|
6
|
-
validations:
|
|
7
|
-
- name: answer_required
|
|
8
|
-
message: "You must provide a name with a maximum of 200 characters"
|
|
9
|
-
- name: under_character_limit
|
|
10
|
-
message: "You must provide a name with a maximum of 200 characters"
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
name: Acknowledge inclusion possibility
|
|
2
|
-
question: Do you understand that under a Call-Off Procedure, a Buyer using the G-Cloud 15 Framework may include a quality requirement to a Call-Off Contract? Please refer to Attachment 2.
|
|
3
|
-
|
|
4
|
-
depends:
|
|
5
|
-
- "on": "route"
|
|
6
|
-
being:
|
|
7
|
-
- isaas
|
|
8
|
-
- saas
|
|
9
|
-
- cloud-support
|
|
10
|
-
|
|
11
|
-
type: boolean
|
|
12
|
-
required_value: true
|
|
13
|
-
|
|
14
|
-
validations:
|
|
15
|
-
-
|
|
16
|
-
name: not_required_value
|
|
17
|
-
message: You must select “Yes” to continue with your application
|
|
18
|
-
-
|
|
19
|
-
name: answer_required
|
|
20
|
-
message: You must select “Yes” to continue with your application
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
name: Acknowledge evaluation requirement
|
|
2
|
-
question: Do you understand that CCS and Buyers using the G-Cloud 15 Framework are required to evaluate quality requirements as part of a Framework and Call-Off Procedure?
|
|
3
|
-
|
|
4
|
-
depends:
|
|
5
|
-
- "on": "route"
|
|
6
|
-
being:
|
|
7
|
-
- isaas
|
|
8
|
-
- saas
|
|
9
|
-
- cloud-support
|
|
10
|
-
|
|
11
|
-
type: boolean
|
|
12
|
-
required_value: true
|
|
13
|
-
|
|
14
|
-
validations:
|
|
15
|
-
-
|
|
16
|
-
name: not_required_value
|
|
17
|
-
message: You must select “Yes” to continue with your application
|
|
18
|
-
-
|
|
19
|
-
name: answer_required
|
|
20
|
-
message: You must select “Yes” to continue with your application
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
name: Understand evaluation process
|
|
2
|
-
question: Do you understand that CCS will evaluate your G-Cloud 15 quality requirements response as per the process described within Attachment 2.
|
|
3
|
-
|
|
4
|
-
depends:
|
|
5
|
-
- "on": "route"
|
|
6
|
-
being:
|
|
7
|
-
- isaas
|
|
8
|
-
- saas
|
|
9
|
-
- cloud-support
|
|
10
|
-
|
|
11
|
-
type: boolean
|
|
12
|
-
required_value: true
|
|
13
|
-
|
|
14
|
-
validations:
|
|
15
|
-
-
|
|
16
|
-
name: not_required_value
|
|
17
|
-
message: You must select “Yes” to continue with your application
|
|
18
|
-
-
|
|
19
|
-
name: answer_required
|
|
20
|
-
message: You must select “Yes” to continue with your application
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
name: Confirm compliance obligation
|
|
2
|
-
question: Do you understand that, provided that it is relevant and proportionate, you will be obligated to meet the quality requirements included in the Call-Off Contract(s)?
|
|
3
|
-
|
|
4
|
-
depends:
|
|
5
|
-
- "on": "route"
|
|
6
|
-
being:
|
|
7
|
-
- isaas
|
|
8
|
-
- saas
|
|
9
|
-
- cloud-support
|
|
10
|
-
|
|
11
|
-
type: boolean
|
|
12
|
-
required_value: true
|
|
13
|
-
|
|
14
|
-
validations:
|
|
15
|
-
-
|
|
16
|
-
name: not_required_value
|
|
17
|
-
message: You must select “Yes” to continue with your application
|
|
18
|
-
-
|
|
19
|
-
name: answer_required
|
|
20
|
-
message: You must select “Yes” to continue with your application
|