ccs-digitalmarketplace-frameworks 5.0.3 → 5.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. package/frameworks/g-cloud-15/manifests/edit_additional_lot_questions.yml +25 -22
  2. package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouAReseller1a.yml +29 -0
  3. package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouAReseller1b.yml +32 -0
  4. package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouReliantForSomeAccreditations.yml +19 -0
  5. package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceCyberEssentialsCertification.yml +9 -0
  6. package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceProcessesToProvideUserSupportCloudSoftware.yml +13 -0
  7. package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceProcessesToProvideUserSupportCloudSupport.yml +13 -0
  8. package/frameworks/g-cloud-15/questions/additional-lot-questions/haveIndustryStandardDataSanitisationProcess.yml +9 -0
  9. package/frameworks/g-cloud-15/questions/additional-lot-questions/howAreStaffSecurityChecksPerformed.yml +15 -0
  10. package/frameworks/g-cloud-15/questions/additional-lot-questions/howOftenWillPenTestingBeConducted.yml +14 -0
  11. package/frameworks/g-cloud-15/questions/additional-lot-questions/iso14001certificationURL.yml +23 -0
  12. package/frameworks/g-cloud-15/questions/additional-lot-questions/iso27001certificationURL.yml +23 -0
  13. package/frameworks/g-cloud-15/questions/additional-lot-questions/iso27017certificationURL.yml +23 -0
  14. package/frameworks/g-cloud-15/questions/additional-lot-questions/iso27018certificationURL.yml +23 -0
  15. package/frameworks/g-cloud-15/questions/additional-lot-questions/iso9001certificationURL.yml +23 -0
  16. package/frameworks/g-cloud-15/questions/additional-lot-questions/knowTheLocations.yml +13 -0
  17. package/frameworks/g-cloud-15/questions/additional-lot-questions/makeSureStaffHaveSecurityClearance.yml +13 -0
  18. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHaveInPlaceCyberEssentials.yml +13 -0
  19. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowDoYouManageStaffSecurityClearanceChecks.yml +14 -0
  20. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideAssetProtection.yml +14 -0
  21. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideSataSanitisation.yml +13 -0
  22. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideUserSupportCloudSoftware.yml +14 -0
  23. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHowYouWillProvideUserSupportCloudSupport.yml +14 -0
  24. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1a.yml +16 -0
  25. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1b.yml +17 -0
  26. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqWhatFrequencyWillPenTestingBeConducted.yml +14 -0
  27. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqWhatLevelOfSecurityClearance.yml +14 -0
  28. package/frameworks/g-cloud-15/questions/additional-lot-questions/whatLevelOfStaffSecurityClearance.yml +17 -0
  29. package/frameworks/g-cloud-15/questions/additional-lot-questions/whenIsUserSupportAvailable.yml +14 -0
  30. package/frameworks/g-cloud-15/questions/additional-lot-questions/whereIsDataStoredAndProcessed.yml +14 -0
  31. package/frameworks/g-cloud-15/questions/additional-lot-questions/willPenTestingBeConducted.yml +13 -0
  32. package/frameworks/g-cloud-15/questions/additional-lot-questions/willYourOrgPerformSecurityChecks.yml +13 -0
  33. package/package.json +1 -1
  34. package/frameworks/g-cloud-15/questions/additional-lot-questions/commitmentForFuture.yml +0 -51
  35. package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSupplierContractManagerContact.yml +0 -18
  36. package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerCommitment.yml +0 -28
  37. package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerContactEmail.yml +0 -12
  38. package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerContactJobTitle.yml +0 -10
  39. package/frameworks/g-cloud-15/questions/additional-lot-questions/supplierContractManagerContactName.yml +0 -10
  40. package/frameworks/g-cloud-15/questions/additional-lot-questions/understandBuyerIncludeQualityRequirement.yml +0 -20
  41. package/frameworks/g-cloud-15/questions/additional-lot-questions/understandCCSBuyersEvaluateQualityReq.yml +0 -20
  42. package/frameworks/g-cloud-15/questions/additional-lot-questions/understandCCSEvaluateQualityResponse.yml +0 -20
  43. package/frameworks/g-cloud-15/questions/additional-lot-questions/understandObligationToMeetQualityReq.yml +0 -20
@@ -1,36 +1,39 @@
1
1
  -
2
- name: "Section A - Understanding Quality Requirements"
3
- slug: understanding-quality-requirements
2
+ name: "Selection questions"
3
+ slug: selection-questions
4
4
  editable: True
5
- description: |
6
- The purpose of this section is to confirm that suppliers understand the concept of Quality Requirements and its relevance and importance to the G-Cloud 15 Framework.
7
-
8
- The following questions are PASS/FAIL. If you respond ‘No’ to any of these questions, your Framework Tender Response will be disqualified. Please refer to Attachment 2.
9
5
  questions:
10
- - understandCCSBuyersEvaluateQualityReq
11
- - understandCCSEvaluateQualityResponse
12
- - understandBuyerIncludeQualityRequirement
13
- - understandObligationToMeetQualityReq
14
-
6
+ - multiqSelectionQuestions1a
7
+ - multiqSelectionQuestions1b
15
8
 
16
9
  -
17
- name: "Section B - Commitment for Future: Delivery"
18
- slug: commitment-for-future
10
+ name: "Award criteria for Lots 2a and 2b"
11
+ slug: award-criteria-2a-and-2b
19
12
  editable: True
20
13
  description: |
21
- The purpose of this section is to assess Suppliers’ commitment to delivering quality requirements, including specific actions they plan to take.
14
+ CCS requires you to confirm your understanding of providing user support and asset protection for SaaS services is essential for successful delivery..
22
15
 
23
- Quality requirements of Project Management, Continuous Improvement, Innovation and Account Management are considered relevant to G-Cloud 15 Framework Lots 2a, 2b and 3.
16
+ In order to satisfy the award criteria, you must fully address each of the sub-criteria
17
+
18
+ Please select the processes that you will have in place to effectively provide user support, using email or ticketing support, phone support or web chat support, and asset Protection by confirming where service user data is processed and stored, frequency of penetration testing and your data sanitisation process (in accordance with the Service Questions that will be published on the Digital Marketplace)
24
19
  questions:
25
- - commitmentForFuture
20
+ - multiqHowYouWillProvideUserSupportCloudSoftware
21
+ - multiqHowYouWillProvideAssetProtection
22
+ - multiqWhatFrequencyWillPenTestingBeConducted
23
+ - multiqHowYouWillProvideSataSanitisation
26
24
 
27
25
  -
28
- name: "Section C - Organisational Readiness"
29
- slug: organisational-readiness
26
+ name: "Award criteria for Lot 3"
27
+ slug: award-criteria-3
30
28
  editable: True
31
29
  description: |
32
- Suppliers who are awarded a Contract under this Framework will be required to appoint a Supplier's Contract Manager to oversee the operation of the Call-Off Contract, and ensuring Project Management and/or Continuous Improvement and/or Innovation and/or Account Management commitments are delivered. For the purpose of this Framework, the Supplier's Contract Manager will be responsible for ensuring the correct processes and systems are in place for delivery of your Project Management and/or Continuous Improvement and/or Innovation and/or Account Management commitments.
33
- The Supplier's Contract Manager role may vary between organisations, the role is the person identified in the Order Form appointed by the Supplier and any alternative person whom the Supplier intends to appoint to the role, provided that the Supplier informs the Buyer prior to the appointment. For this reason, shared mailboxes are acceptable and an individual’s contact name is still required.
30
+ CCS requires you to confirm your understanding of providing user support, staff security and cyber security certification for Cloud Support services is essential for successful delivery
31
+
32
+ In order to satisfy the award criteria, you must fully address each of the sub-criteria
33
+
34
+ Please select the processes that you will have in place to effectively provide user support, using email or ticketing support, phone support or web chat support, and staff security by confirming how staff security checks are performed, and what level of security checks will be performed, and confirming your approach to cyber security certification, (in accordance with the Service Questions that will be published on the Digital Marketplace)
34
35
  questions:
35
- - supplierContractManagerCommitment
36
- - multiqSupplierContractManagerContact
36
+ - multiqHowYouWillProvideUserSupportCloudSupport
37
+ - multiqHowDoYouManageStaffSecurityClearanceChecks
38
+ - multiqWhatLevelOfSecurityClearance
39
+ - multiqHaveInPlaceCyberEssentials
@@ -0,0 +1,29 @@
1
+ id: areYouAReseller
2
+ name: Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure
3
+ question: >
4
+ The specification for this Lot requires that the Supplier is in sole control of the infrastructure that underlies its Services or can evidence that they are an accredited reseller of such infrastructure.
5
+
6
+ Confirm whether you are bidding to offer IaaS and/or PaaS as a reseller
7
+ question_advice: >
8
+ If you will offer both proprietary and resold services as part of your core IaaS and PaaS offering, select ‘Reseller’.
9
+
10
+ If you may use another’s service resold if it is ancillary to the core IaaS or PaaS service, but will provide the core IaaS or PaaS services entirely without reselling in the normal operation of your services, select ‘Sole Control’.
11
+
12
+ followup:
13
+ iso9001certificationURL:
14
+ - reseller
15
+ - sole-control
16
+ areYouReliantForSomeAccreditations:
17
+ - reseller
18
+ - sole-control
19
+
20
+ type: radios
21
+ options:
22
+ - label: Reseller
23
+ value: reseller
24
+ - label: Sole Control of the Infrastructure
25
+ value: sole-control
26
+
27
+ validations:
28
+ - name: answer_required
29
+ message: You must select if you have in place processes to provide user support
@@ -0,0 +1,32 @@
1
+ id: areYouAReseller
2
+ name: Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure
3
+ question: >
4
+ The specification for this Lot requires that the Supplier is in sole control of the infrastructure that underlies its Services or can evidence that they are an accredited reseller of such infrastructure.
5
+
6
+ Confirm whether you are bidding to offer IaaS and/or PaaS as a reseller
7
+ question_advice: >
8
+ If you will offer both proprietary and resold services as part of your core IaaS and PaaS offering, select ‘Reseller’.
9
+
10
+ If you may use another’s service resold if it is ancillary to the core IaaS or PaaS service, but will provide the core IaaS or PaaS services entirely without reselling in the normal operation of your services, select ‘Sole Control’.
11
+
12
+ followup:
13
+ iso9001certificationURL:
14
+ - reseller
15
+ - sole-control
16
+ areYouReliantForSomeAccreditations:
17
+ - reseller
18
+ - sole-control
19
+ iso27018certificationURL:
20
+ - reseller
21
+ - sole-control
22
+
23
+ type: radios
24
+ options:
25
+ - label: Reseller
26
+ value: reseller
27
+ - label: Sole Control of the Infrastructure
28
+ value: sole-control
29
+
30
+ validations:
31
+ - name: answer_required
32
+ message: You must select if you have in place processes to provide user support
@@ -0,0 +1,19 @@
1
+
2
+ name: Are you reliant on the Cloud Service Provider for some accreditations
3
+ question: Are you reliant on the Cloud Service Provider for some accreditations required by the specification for this Lot, such as cloud security related ISOs?
4
+ question_advice: This means that because the services will be resold in their entirety, the service may be accredited in the original supplier’s name, but you will not need to hold that accreditation directly
5
+
6
+ type: boolean
7
+ hidden: true
8
+
9
+ followup:
10
+ iso14001certificationURL:
11
+ - true
12
+ iso27001certificationURL:
13
+ - true
14
+ iso27017certificationURL:
15
+ - true
16
+
17
+ validations:
18
+ - name: answer_required
19
+ message: You must select an option
@@ -0,0 +1,9 @@
1
+
2
+ name: Are you prepared to have in place Cyber Essentials certification?
3
+ question: Are you prepared to have in place Cyber Essentials (or equivalent or higher) certification should a Buyer require it?
4
+
5
+ type: boolean
6
+
7
+ validations:
8
+ - name: answer_required
9
+ message: You must select if you are you prepared to have in place Cyber Essentials certification
@@ -0,0 +1,13 @@
1
+
2
+ name: Have in place processes to provide user support
3
+ question: Will your organisation have in place processes to provide user support for the SaaS services in lots 2a and lot 2b?
4
+
5
+ followup:
6
+ whenIsUserSupportAvailable:
7
+ - true
8
+
9
+ type: boolean
10
+
11
+ validations:
12
+ - name: answer_required
13
+ message: You must select if you have in place processes to provide user support
@@ -0,0 +1,13 @@
1
+
2
+ name: Have in place processes to provide user support
3
+ question: Will your organisation have in place processes to provide user support for the Cloud Support services in lot 3?
4
+
5
+ followup:
6
+ whenIsUserSupportAvailable:
7
+ - true
8
+
9
+ type: boolean
10
+
11
+ validations:
12
+ - name: answer_required
13
+ message: You must select if you have in place processes to provide user support
@@ -0,0 +1,9 @@
1
+
2
+ name: Do you have a industry standard data sanitisation process?
3
+ question: Do you have a industry standard data sanitisation process, such as explicit overwriting of storage before reallocation / Secure Erase, degaussing, or physical destruction / hardware containing data is completely destroyed?
4
+
5
+ type: boolean
6
+
7
+ validations:
8
+ - name: answer_required
9
+ message: You must select if you have a industry standard data sanitisation process
@@ -0,0 +1,15 @@
1
+ name: How are staff security checks performed?
2
+ question: How are staff security checks performed?
3
+
4
+ hidden: true
5
+
6
+ type: radios
7
+ options:
8
+ - label: Staff screening performed which conforms to BS7858:2019
9
+ value: conforms-to-bs
10
+ - label: Staff screening performed but doesn’t conform with BS7858:2019
11
+ value: does-not-conform-to-bs
12
+
13
+ validations:
14
+ - name: answer_required
15
+ message: You must select how are staff security checks performed
@@ -0,0 +1,14 @@
1
+ name: How often will penetration testing be conducted on the SaaS service?
2
+ question: How often will penetration testing be conducted on the SaaS service?
3
+
4
+ hidden: true
5
+
6
+ type: radios
7
+ options:
8
+ - label: At least every 6 months
9
+ - label: At least once a year
10
+ - label: Less than once a year
11
+
12
+ validations:
13
+ - name: answer_required
14
+ message: You must select how often will penetration testing be conducted
@@ -0,0 +1,23 @@
1
+
2
+ name: ISO 14001 certification
3
+ question: Provide your ISO 14001 certification
4
+ hint: This file must be in an open document format and have a maximum file size of 5MB
5
+
6
+ type: upload
7
+ hidden: true
8
+
9
+ file_settings:
10
+ name: iso-14001-certification
11
+ max_size: 5
12
+ file_types:
13
+ - open_document
14
+
15
+ validations:
16
+ - name: answer_required
17
+ message: You must upload your ISO 14001 certification
18
+ - name: file_is_valid_format
19
+ message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
20
+ - name: file_is_less_than_5mb
21
+ message: The file must be smaller than 5MB.
22
+ - name: file_can_be_saved
23
+ message: The selected file could not be uploaded - try again.
@@ -0,0 +1,23 @@
1
+
2
+ name: ISO 27001 certification
3
+ question: Provide your ISO 27001 certification
4
+ hint: This file must be in an open document format and have a maximum file size of 5MB
5
+
6
+ type: upload
7
+ hidden: true
8
+
9
+ file_settings:
10
+ name: iso-27001-certification
11
+ max_size: 5
12
+ file_types:
13
+ - open_document
14
+
15
+ validations:
16
+ - name: answer_required
17
+ message: You must upload your ISO 27001 certification
18
+ - name: file_is_valid_format
19
+ message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
20
+ - name: file_is_less_than_5mb
21
+ message: The file must be smaller than 5MB.
22
+ - name: file_can_be_saved
23
+ message: The selected file could not be uploaded - try again.
@@ -0,0 +1,23 @@
1
+
2
+ name: ISO 27017 certification
3
+ question: Provide your ISO 27017 certification
4
+ hint: This file must be in an open document format and have a maximum file size of 5MB
5
+
6
+ type: upload
7
+ hidden: true
8
+
9
+ file_settings:
10
+ name: iso-27017-certification
11
+ max_size: 5
12
+ file_types:
13
+ - open_document
14
+
15
+ validations:
16
+ - name: answer_required
17
+ message: You must upload your ISO 27017 certification
18
+ - name: file_is_valid_format
19
+ message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
20
+ - name: file_is_less_than_5mb
21
+ message: The file must be smaller than 5MB.
22
+ - name: file_can_be_saved
23
+ message: The selected file could not be uploaded - try again.
@@ -0,0 +1,23 @@
1
+
2
+ name: ISO 27018 certification
3
+ question: Provide your ISO 27018 certification
4
+ hint: This file must be in an open document format and have a maximum file size of 5MB
5
+
6
+ type: upload
7
+ hidden: true
8
+
9
+ file_settings:
10
+ name: iso-27018-certification
11
+ max_size: 5
12
+ file_types:
13
+ - open_document
14
+
15
+ validations:
16
+ - name: answer_required
17
+ message: You must upload your ISO 27018 certification
18
+ - name: file_is_valid_format
19
+ message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
20
+ - name: file_is_less_than_5mb
21
+ message: The file must be smaller than 5MB.
22
+ - name: file_can_be_saved
23
+ message: The selected file could not be uploaded - try again.
@@ -0,0 +1,23 @@
1
+
2
+ name: ISO 9001 certification
3
+ question: Provide your ISO 9001 certification
4
+ hint: This file must be in an open document format and have a maximum file size of 5MB
5
+
6
+ type: upload
7
+ hidden: true
8
+
9
+ file_settings:
10
+ name: iso-9001-certification
11
+ max_size: 5
12
+ file_types:
13
+ - open_document
14
+
15
+ validations:
16
+ - name: answer_required
17
+ message: You must upload your ISO 9001 certification
18
+ - name: file_is_valid_format
19
+ message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
20
+ - name: file_is_less_than_5mb
21
+ message: The file must be smaller than 5MB.
22
+ - name: file_can_be_saved
23
+ message: The selected file could not be uploaded - try again.
@@ -0,0 +1,13 @@
1
+
2
+ name: Know the location where the service user data is stored and processed
3
+ question: Will your organisation know the location where the service user data is stored and processed?
4
+
5
+ followup:
6
+ whereIsDataStoredAndProcessed:
7
+ - true
8
+
9
+ type: boolean
10
+
11
+ validations:
12
+ - name: answer_required
13
+ message: You must select if you know the location where the service user data is stored and processed
@@ -0,0 +1,13 @@
1
+
2
+ name: Are you prepared to make sure your staff have staff security clearance
3
+ question: Are you prepared to make sure your staff have staff security clearance if required by the Buyer?
4
+
5
+ followup:
6
+ whatLevelOfStaffSecurityClearance:
7
+ - true
8
+
9
+ type: boolean
10
+
11
+ validations:
12
+ - name: answer_required
13
+ message: You must select if you are prepared to make sure your staff have staff security clearance
@@ -0,0 +1,13 @@
1
+ name: Are you prepared to have in place Cyber Essentials
2
+ question: If the Buyer requires it are you prepared to have in place Cyber Essentials (or equivalent or higher) certification for your Cloud Support services delivered in lots 3
3
+ question_advice: >
4
+ Your response must confirm that if a Buyer requires it you will have in place Cyber Essentials (or equivalent or higher) certification for your Cloud Support services, by confirming that you are prepared to have Cyber Essentials (or equivalent or higher) certification in place, in accordance with the Service Questions in the Standards and Certifications section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-support
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - haveInPlaceCyberEssentialsCertification
@@ -0,0 +1,14 @@
1
+ name: How do you manage staff security clearance checks
2
+ question: How do you manage staff security clearance checks for staff with access to information or connected to the delivery of your Cloud Support services in lot 3
3
+ question_advice: >
4
+ Your response must confirm the staff security clearance checks that you will have in place for your Cloud Support services, by confirming whether staff security clearance checks are performed, in accordance with the Service Questions in the Staff Security section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-support
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - willYourOrgPerformSecurityChecks
14
+ - howAreStaffSecurityChecksPerformed
@@ -0,0 +1,14 @@
1
+ name: How you will provide asset protection
2
+ question: How you will provide asset protection for your SaaS services delivered in lots 2a and 2b
3
+ question_advice: >
4
+ Your response must confirm the asset protection that you will have in place for your SaaS services, by confirming data storage and processing locations, in accordance with the Service Questions in the Asset Protection section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-software
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - knowTheLocations
14
+ - whereIsDataStoredAndProcessed
@@ -0,0 +1,13 @@
1
+ name: How you will provide data sanitisation
2
+ question: How you will provide data sanitisation for your SaaS services delivered in lots 2a and 2b
3
+ question_advice: >
4
+ Your response must confirm that you will have data sanitisation processes in place for your SaaS services, by confirming if you will have industry standard data sanitisation processes such as explicit overwriting of storage before reallocation / Secure Erase, degaussing, or physical destruction / hardware containing data is completely destroyed, in accordance with the Service Questions in the Asset Protection section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-software
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - haveIndustryStandardDataSanitisationProcess
@@ -0,0 +1,14 @@
1
+ name: How you will provide user support
2
+ question: How you will provide user support for your SaaS services delivered in lots 2a and 2b
3
+ question_advice: >
4
+ Your response must confirm the availability of the user support that you will have in place to effectively provide User Support for your SaaS services, using processes such as Email/ticketing support, Phone support or Web chat support, in accordance with the Service Questions in the User Support section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-software
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - haveInPlaceProcessesToProvideUserSupportCloudSoftware
14
+ - whenIsUserSupportAvailable
@@ -0,0 +1,14 @@
1
+ name: How you will provide user support
2
+ question: How you will provide user support for your Cloud Support services delivered in lot 3
3
+ question_advice: >
4
+ Your response must confirm the availability of the user support that you will have in place to effectively provide User Support for your Cloud Support services, using processes such as Email/ticketing support, Phone support or Web chat support, in accordance with the Service Questions in the User Support section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-support
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - haveInPlaceProcessesToProvideUserSupportCloudSupport
14
+ - whenIsUserSupportAvailable
@@ -0,0 +1,16 @@
1
+ name: Are you a reseller?
2
+ question: Are you a reseller?
3
+
4
+ depends:
5
+ - "on": route
6
+ being:
7
+ - iaas-and-paas
8
+
9
+ type: multiquestion
10
+ questions:
11
+ - areYouAReseller1a
12
+ - iso9001certificationURL
13
+ - areYouReliantForSomeAccreditations
14
+ - iso14001certificationURL
15
+ - iso27001certificationURL
16
+ - iso27017certificationURL
@@ -0,0 +1,17 @@
1
+ name: Are you a reseller?
2
+ question: Are you a reseller?
3
+
4
+ depends:
5
+ - "on": route
6
+ being:
7
+ - iaas-and-paas-above-official
8
+
9
+ type: multiquestion
10
+ questions:
11
+ - areYouAReseller1b
12
+ - iso9001certificationURL
13
+ - areYouReliantForSomeAccreditations
14
+ - iso14001certificationURL
15
+ - iso27001certificationURL
16
+ - iso27017certificationURL
17
+ - iso27018certificationURL
@@ -0,0 +1,14 @@
1
+ name: What frequency will penetration testing be conducted
2
+ question: At what frequency will penetration testing be conducted for the SaaS services delivered in lots 2a and 2b
3
+ question_advice: >
4
+ Your response must confirm the penetration testing frequency that will be applied to the SaaS services, by confirming how often penetration testing occurs, in accordance with the Service Questions in the Asset Protection section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-software
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - willPenTestingBeConducted
14
+ - howOftenWillPenTestingBeConducted
@@ -0,0 +1,14 @@
1
+ name: What level of security clearance are you prepared to implement
2
+ question: If the Buyer requires it, what level of security clearance are you prepared to implement to make sure your staff have for the Cloud Support services delivered in lot 3
3
+ question_advice: >
4
+ Your response must confirm the maximum level of staff security clearance that you are prepared to have in place for your Cloud Support services, by confirming the level of staff security clearance that you are prepared to have in place, in accordance with the Service Questions in the Staff Security section on the Digital Marketplace
5
+
6
+ depends:
7
+ - "on": route
8
+ being:
9
+ - cloud-support
10
+
11
+ type: multiquestion
12
+ questions:
13
+ - makeSureStaffHaveSecurityClearance
14
+ - whatLevelOfStaffSecurityClearance
@@ -0,0 +1,17 @@
1
+ name: What level of staff security clearance are you prepared to have in place should a Buyer require it?
2
+ question: What level of staff security clearance are you prepared to have in place should a Buyer require it?
3
+
4
+ hidden: true
5
+
6
+ type: radios
7
+ options:
8
+ - label: Up to Developed Vetting (DV)
9
+ value: dv
10
+ - label: Up to Security Clearance (SC)
11
+ value: sc
12
+ - label: Up to Baseline Personnel Security Standard (BPSS)
13
+ value: bpss
14
+
15
+ validations:
16
+ - name: answer_required
17
+ message: You must select what level of staff security clearance are you prepared to have in place
@@ -0,0 +1,14 @@
1
+ name: When is user support available?
2
+ question: When is user support available?
3
+
4
+ hidden: true
5
+
6
+ type: radios
7
+ options:
8
+ - label: 24 hours, 7 days a week
9
+ - label: 9 to 5 (UK time), 7 days a week
10
+ - label: 9 to 5 (UK time), Monday to Friday
11
+
12
+ validations:
13
+ - name: answer_required
14
+ message: You must select when is user support is available
@@ -0,0 +1,14 @@
1
+ name: Where is service user data stored and processed?
2
+ question: Where is service user data stored and processed?
3
+
4
+ hidden: true
5
+
6
+ type: checkboxes
7
+ options:
8
+ - label: United Kingdom
9
+ - label: European Economic Area (EEA)
10
+ - label: Other
11
+
12
+ validations:
13
+ - name: answer_required
14
+ message: You must select where is service user data stored and processed
@@ -0,0 +1,13 @@
1
+
2
+ name: Will penetration testing be conducted?
3
+ question: Will penetration testing be conducted on the SaaS service?
4
+
5
+ followup:
6
+ howOftenWillPenTestingBeConducted:
7
+ - true
8
+
9
+ type: boolean
10
+
11
+ validations:
12
+ - name: answer_required
13
+ message: You must select if you will penetration testing be conducted
@@ -0,0 +1,13 @@
1
+
2
+ name: Will your organisation perform staff security clearance checks
3
+ question: Will your organisation perform staff security clearance checks for staff with access to information or connected to the delivery of your Cloud Support services?
4
+
5
+ followup:
6
+ howAreStaffSecurityChecksPerformed:
7
+ - true
8
+
9
+ type: boolean
10
+
11
+ validations:
12
+ - name: answer_required
13
+ message: You must select if you will your organisation perform staff security clearance checks
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "ccs-digitalmarketplace-frameworks",
3
- "version": "5.0.3",
3
+ "version": "5.1.1",
4
4
  "description": "Data files for Digital Marketplace’s procurement frameworks",
5
5
  "repository": {
6
6
  "type": "git",
@@ -1,51 +0,0 @@
1
- name: Capabilities you can mobilise
2
- question: Which of the following capabilities will you be able to mobilise when a call-off contract goes live?
3
- question_advice: You must select at least one to qualify as a supplier
4
- hint: Selecting multiple options does not equate to a higher score
5
-
6
- depends:
7
- - "on": "route"
8
- being:
9
- - isaas
10
- - saas
11
- - cloud-support
12
- type: checkbox_tree
13
-
14
- item_name:
15
- singular: capability
16
- plural: capabilities
17
-
18
- options:
19
- - label: Project Management
20
- options:
21
- - label: Project Manager (s) with maintained qualification of Prince2 Practitioner
22
- - label: Project Manager (s) with maintained qualification from the Association for Project Managers
23
- - label: Project Manager (s) with maintained qualification from the Project Management Institution (e.g. Project Management Professional (PMP) or Certified Associate in Project Management (CAPM))
24
- - label: Capability with Waterfall methodology
25
- - label: Capability with Agile methodology
26
- - label: Capability with Scrum methodology
27
- - label: Capability with Lean methodology
28
- - label: Capability with Extreme Programming (XP) methodology
29
- - label: Capability with PRINCE2 methodology
30
- - label: Continuous Improvement and Innovation
31
- options:
32
- - label: Customer Feedback for Service Improvement. Defined process for systematically gathering and reviewing customer feedback specifically for the purpose of improving products and/or services
33
- - label: Communication of Product/Service Enhancements. Proactively communicating significant service updates, new feature releases, or relevant roadmap information
34
- - label: Value Stream Mapping - identify the flow of data and information to target areas for improvement
35
- - label: PDCA (Plan-Do-Check-Act) - plan improvement, implement changes, check results, and act based on the outcomes
36
- - label: Lessons Learnt - post contract/project review to learn from successes and failures
37
- - label: Continuous Monitoring - Continual critical observation of service delivery to detect potential issues and proactively address them
38
- - label: Benchmarking
39
- - label: Account Management
40
- options:
41
- - label: Contract Management reviews
42
- - label: Service Level Agreement (SLA)
43
- - label: Key Performance Indicators (KPI's)
44
- - label: Escalation Process
45
- - label: Multi-channel customer service - phone and/or email and/or webchat
46
- - label: Performance Review Meetings
47
- - label: Customer Satisfaction Surveys
48
-
49
- validations:
50
- - name: answer_required
51
- message: You must select an option
@@ -1,18 +0,0 @@
1
- name: "Supplier Contract Manager Contact"
2
- question: "Provide contact details for the individual who will be your Supplier's Contract Manager."
3
-
4
- question_advice: If you are unable to state who this may be, enter the details of the person who would be ultimately responsible for delivery of any Contract, or for the relationship with CCS.
5
-
6
- depends:
7
- - "on": "route"
8
- being:
9
- - isaas
10
- - saas
11
- - cloud-support
12
-
13
- type: multiquestion
14
-
15
- questions:
16
- - supplierContractManagerContactName
17
- - supplierContractManagerContactJobTitle
18
- - supplierContractManagerContactEmail
@@ -1,28 +0,0 @@
1
- name: Supplier's Contract Manager
2
- question: Please commit here to having a Supplier's Contract Manager in the organisation to be responsible for delivery of your Project Management and/or Continuous Improvement and/or Innovation and/or Account Management commitment.
3
- question_advice: If you do not and will not have a Supplier's Contract Manager, and you are not willing to nominate someone to this role, you may state this here, and your Framework Tender Response will be disqualified.
4
-
5
- depends:
6
- - "on": "route"
7
- being:
8
- - isaas
9
- - saas
10
- - cloud-support
11
-
12
- type: radios
13
- required_value: "will_have_contract_manager"
14
- options:
15
- -
16
- label: We WILL have a Supplier's Contract Manager in the organisation
17
- value: "will_have_contract_manager"
18
- -
19
- label: We will NOT have a Supplier's Contract Manager in the organisation
20
- value: "will_not_contract_manager"
21
-
22
- validations:
23
- -
24
- name: not_required_value
25
- message: You must confirm you will have a Supplier's Contract Manager in the organisation.
26
- -
27
- name: answer_required
28
- message: You must confirm you will have a Supplier's Contract Manager in the organisation.
@@ -1,12 +0,0 @@
1
- name: Email
2
- question: Email
3
- type: text
4
- limits:
5
- format: email
6
- validations:
7
- -
8
- name: answer_required
9
- message: "You must enter a valid email"
10
-
11
- - name: invalid_format
12
- message: "You must enter a valid email"
@@ -1,10 +0,0 @@
1
- name: Job title
2
- question: Job title
3
- type: text
4
- max_length_in_characters: 200
5
-
6
- validations:
7
- - name: answer_required
8
- message: "You must provide a job title with a maximum of 200 characters"
9
- - name: under_character_limit
10
- message: "You must provide a job title with a maximum of 200 characters"
@@ -1,10 +0,0 @@
1
- name: Name
2
- question: Name
3
- type: text
4
- max_length_in_characters: 200
5
-
6
- validations:
7
- - name: answer_required
8
- message: "You must provide a name with a maximum of 200 characters"
9
- - name: under_character_limit
10
- message: "You must provide a name with a maximum of 200 characters"
@@ -1,20 +0,0 @@
1
- name: Acknowledge inclusion possibility
2
- question: Do you understand that under a Call-Off Procedure, a Buyer using the G-Cloud 15 Framework may include a quality requirement to a Call-Off Contract? Please refer to Attachment 2.
3
-
4
- depends:
5
- - "on": "route"
6
- being:
7
- - isaas
8
- - saas
9
- - cloud-support
10
-
11
- type: boolean
12
- required_value: true
13
-
14
- validations:
15
- -
16
- name: not_required_value
17
- message: You must select “Yes” to continue with your application
18
- -
19
- name: answer_required
20
- message: You must select “Yes” to continue with your application
@@ -1,20 +0,0 @@
1
- name: Acknowledge evaluation requirement
2
- question: Do you understand that CCS and Buyers using the G-Cloud 15 Framework are required to evaluate quality requirements as part of a Framework and Call-Off Procedure?
3
-
4
- depends:
5
- - "on": "route"
6
- being:
7
- - isaas
8
- - saas
9
- - cloud-support
10
-
11
- type: boolean
12
- required_value: true
13
-
14
- validations:
15
- -
16
- name: not_required_value
17
- message: You must select “Yes” to continue with your application
18
- -
19
- name: answer_required
20
- message: You must select “Yes” to continue with your application
@@ -1,20 +0,0 @@
1
- name: Understand evaluation process
2
- question: Do you understand that CCS will evaluate your G-Cloud 15 quality requirements response as per the process described within Attachment 2.
3
-
4
- depends:
5
- - "on": "route"
6
- being:
7
- - isaas
8
- - saas
9
- - cloud-support
10
-
11
- type: boolean
12
- required_value: true
13
-
14
- validations:
15
- -
16
- name: not_required_value
17
- message: You must select “Yes” to continue with your application
18
- -
19
- name: answer_required
20
- message: You must select “Yes” to continue with your application
@@ -1,20 +0,0 @@
1
- name: Confirm compliance obligation
2
- question: Do you understand that, provided that it is relevant and proportionate, you will be obligated to meet the quality requirements included in the Call-Off Contract(s)?
3
-
4
- depends:
5
- - "on": "route"
6
- being:
7
- - isaas
8
- - saas
9
- - cloud-support
10
-
11
- type: boolean
12
- required_value: true
13
-
14
- validations:
15
- -
16
- name: not_required_value
17
- message: You must select “Yes” to continue with your application
18
- -
19
- name: answer_required
20
- message: You must select “Yes” to continue with your application