ccs-digitalmarketplace-frameworks 5.1.21 → 5.1.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/frameworks/g-cloud-15/questions/services/configurationAndChangeManagementType.yml +3 -1
  2. package/frameworks/g-cloud-15/questions/services/incidentManagementType.yml +3 -1
  3. package/frameworks/g-cloud-15/questions/services/multiqSecurityGovernance.yml +1 -0
  4. package/frameworks/g-cloud-15/questions/services/protectiveMonitoringType.yml +4 -1
  5. package/frameworks/g-cloud-15/questions/services/securityCodeOfPractice.yml +18 -0
  6. package/frameworks/g-cloud-15/questions/services/vulnerabilityManagementType.yml +3 -1
  7. package/package.json +1 -1
package/frameworks/g-cloud-15/questions/services/configurationAndChangeManagementType.yml CHANGED
@@ -8,11 +8,13 @@ question_advice: >
8
8
  depends:
9
9
  - "on": lot
10
10
  being:
11
+ - iaas-and-paas
12
+ - isaas
11
13
  - saas
12
14
 
13
15
  type: radios
14
16
  options:
15
- - label: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
17
+ - label: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
16
18
  value: recognised_standard
17
19
  - label: Supplier-defined controls
18
20
  value: supplier_defined
package/frameworks/g-cloud-15/questions/services/incidentManagementType.yml CHANGED
@@ -8,11 +8,13 @@ question_advice: >
8
8
  depends:
9
9
  - "on": lot
10
10
  being:
11
+ - iaas-and-paas
12
+ - isaas
11
13
  - saas
12
14
 
13
15
  type: radios
14
16
  options:
15
- - label: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
17
+ - label: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
16
18
  value: recognised_standard
17
19
  - label: Supplier-defined controls
18
20
  value: supplier_defined
package/frameworks/g-cloud-15/questions/services/multiqSecurityGovernance.yml CHANGED
@@ -11,6 +11,7 @@ depends:
11
11
 
12
12
  type: multiquestion
13
13
  questions:
14
+ - securityCodeOfPractice
14
15
  - securityGovernanceAccreditation
15
16
  - securityGovernanceStandards
16
17
  - securityGovernanceStandardsOther
package/frameworks/g-cloud-15/questions/services/protectiveMonitoringType.yml CHANGED
@@ -8,11 +8,14 @@ question_advice: >
8
8
  depends:
9
9
  - "on": lot
10
10
  being:
11
+ - iaas-and-paas
12
+ - isaas
11
13
  - saas
12
14
 
15
+
13
16
  type: radios
14
17
  options:
15
- - label: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
18
+ - label: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
16
19
  value: recognised_standard
17
20
  - label: Supplier-defined controls
18
21
  value: supplier_defined
package/frameworks/g-cloud-15/questions/services/securityCodeOfPractice.yml ADDED
@@ -0,0 +1,18 @@
1
+ name: Software Security Code of Practice
2
+ question: Does your organisation comply with the recommendations in the Software Security Code of Practice
3
+ question_advice: >
4
+ Read about the <a
5
+ href="https://www.gov.uk/government/publications/software-security-code-of-practice/software-security-code-of-practice" target="_blank"
6
+ rel="noopener noreferrer">Software Security Code of Practice (link opens in a new tab)</a>.
7
+
8
+ depends:
9
+ - "on": lot
10
+ being:
11
+ - isaas
12
+ - saas
13
+
14
+ type: boolean
15
+
16
+ validations:
17
+ - name: answer_required
18
+ message: Please select Yes or No to continue.
package/frameworks/g-cloud-15/questions/services/vulnerabilityManagementType.yml CHANGED
@@ -8,11 +8,13 @@ question_advice: >
8
8
  depends:
9
9
  - "on": lot
10
10
  being:
11
+ - iaas-and-paas
12
+ - isaas
11
13
  - saas
12
14
 
13
15
  type: radios
14
16
  options:
15
- - label: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
17
+ - label: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
16
18
  value: recognised_standard
17
19
  - label: Supplier-defined controls
18
20
  value: supplier_defined
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "ccs-digitalmarketplace-frameworks",
3
- "version": "5.1.21",
3
+ "version": "5.1.23",
4
4
  "description": "Data files for Digital Marketplace’s procurement frameworks",
5
5
  "repository": {
6
6
  "type": "git",