ccs-digitalmarketplace-frameworks 5.1.5 → 5.1.7

package/frameworks/g-cloud-15/manifests/edit_additional_lot_questions.yml

@@ -14,6 +14,18 @@
     - multiqQualityCloudServices1a
     - multiqQualityCloudServices1b
 
+-
+  name: "Non-scored mandatory questions"
+  slug: non-scored-mandatory-questions
+  editable: True
+  questions:
+    - alsoBiddingLot2
+    - alsoBiddingLot3
+    - adhereToNCSCGuidance
+    - policiesAndControlsInPlace
+    - highLevelProcedureForContractualExit
+    - howYouEngageInChangeOfService
+
 -
   name: "Award criteria for Lots 2a and 2b"
   slug: award-criteria-2a-and-2b

package/frameworks/g-cloud-15/questions/additional-lot-questions/adhereToNCSCGuidance.yml

@@ -0,0 +1,18 @@
+name: Adhere to relevant NCSC guidance
+
+question: Do you adhere to relevant NCSC guidance, including but not limited to cloud security principles, supply chain security and risk management frameworks to ensure the resilience and security of your services?
+
+question_advice: >
+  Your adherence must be clear for buyers to understand during any call-off procedure, and may be checked or tested by buyers
+
+depends:
+  - "on": route
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: You must select an option

package/frameworks/g-cloud-15/questions/additional-lot-questions/alsoBiddingLot2.yml

@@ -0,0 +1,15 @@
+name: Also bidding to provide services through Lot 2
+
+question: Are you also bidding to provide services through Lot 2?
+
+depends:
+  - "on": route
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: You must select an option

package/frameworks/g-cloud-15/questions/additional-lot-questions/alsoBiddingLot3.yml

@@ -0,0 +1,15 @@
+name: Also bidding to provide services through Lot 3
+
+question: Are you also bidding to provide services through Lot 3?
+
+depends:
+  - "on": route
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: You must select an option

package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouAReseller1a.yml

@@ -10,6 +10,8 @@ question_advice: >
   If you may use another’s service resold if it is ancillary to the core IaaS or PaaS service, but will provide the core IaaS or PaaS services entirely without reselling in the normal operation of your services, select ‘Sole Control’.
 
 followup:
+  cloudServices:
+    - reseller
   iso9001certificationURL:
     - reseller
     - sole-control
@@ -25,4 +27,4 @@ options:
 
 validations:
   - name: answer_required
-    message:  You must select if you have in place processes to provide user support
+    message: You must select if you have in place processes to provide user support

package/frameworks/g-cloud-15/questions/additional-lot-questions/areYouAReseller1b.yml

@@ -10,6 +10,8 @@ question_advice: >
   If you may use another’s service resold if it is ancillary to the core IaaS or PaaS service, but will provide the core IaaS or PaaS services entirely without reselling in the normal operation of your services, select ‘Sole Control’.
 
 followup:
+  cloudServices:
+    - reseller
   iso9001certificationURL:
     - reseller
     - sole-control
@@ -28,4 +30,4 @@ options:
 
 validations:
   - name: answer_required
-    message:  You must select if you have in place processes to provide user support
+    message: You must select if you have in place processes to provide user support

package/frameworks/g-cloud-15/questions/additional-lot-questions/cloudServiceLink.yml

@@ -0,0 +1,16 @@
+
+name: Website address
+question: Website address for your certifications
+
+type: text
+hidden: true
+
+limits:
+  format: strict-uri
+
+validations:
+  -
+    name: answer_required
+    message: You must enter a website
+  - name: invalid_format
+    message: Enter a valid web address including the scheme, for example https://www.example.com

package/frameworks/g-cloud-15/questions/additional-lot-questions/cloudServiceLinkOrUpload.yml

@@ -0,0 +1,19 @@
+name: Website address/upload for organisation
+question: Can you provide a website address or upload for your certifications to resell for this organisation?
+
+followup:
+  cloudServiceLink:
+    - web-address
+  cloudServiceUploadURL:
+    - upload
+
+type: radios
+options:
+  - label: Website address
+    value: web-address
+  - label: Upload
+    value: upload
+
+validations:
+  - name: answer_required
+    message: You must select an option

package/frameworks/g-cloud-15/questions/additional-lot-questions/cloudServiceOrganisation.yml

@@ -0,0 +1,11 @@
+name: Organisation name
+question: Organisation name
+
+type: text
+max_length_in_characters: 200
+
+validations:
+  - name: answer_required
+    message: You must enter the organisation name
+  - name: under_character_limit
+    message: The organisation name cannot be more than 200 characters

package/frameworks/g-cloud-15/questions/additional-lot-questions/cloudServicePerformance.yml

@@ -4,13 +4,6 @@ question: Cloud service performance
 question_advice: >
   Explain how your technology and processes will ensure that your services will perform in the critical areas of scalability and reliability, to meet buyer requirements. Clearly demonstrate the measures, processes and controls that you will use to meet your clearly defined, relevant performance targets. Reference 6.5.1.4 of Framework Schedule 1 - Specification.
 
-
-depends:
-  - "on": route
-    being:
-      - iaas-and-paas
-      - iaas-and-paas-above-official
-
 type: textbox_large
 
 max_length_in_words: 500
@@ -20,6 +13,3 @@ validations:
     message: You must answer this question
   - name: under_500_words
     message: Your answer must be no more than 500 words
-
-
-

package/frameworks/g-cloud-15/questions/additional-lot-questions/cloudServiceUploadURL.yml

@@ -0,0 +1,23 @@
+
+name: Upload
+question: Upload of for your certifications
+hint: This file must be in an open document format and have a maximum file size of 5MB
+
+type: upload
+hidden: true
+
+file_settings:
+  name: cloud-service-certification
+  max_size: 5
+  file_types:
+    - open_document
+
+validations:
+  - name: answer_required
+    message: You must upload your certifications
+  - name: file_is_valid_format
+    message: The file must be in an open format. Select an Open Document Format (ODF) or PDF/A (eg .pdf, .odt).
+  - name: file_is_less_than_5mb
+    message: The file must be smaller than 5MB.
+  - name: file_can_be_saved
+    message: The selected file could not be uploaded - try again.

package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceProcessesToProvideUserSupportCloudSoftware.yml

@@ -10,4 +10,4 @@ type: boolean
 
 validations:
   - name: answer_required
-    message:  You must select if you have in place processes to provide user support
+    message: You must select if you have in place processes to provide user support

package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceProcessesToProvideUserSupportCloudSupport.yml

@@ -10,4 +10,4 @@ type: boolean
 
 validations:
   - name: answer_required
-    message:  You must select if you have in place processes to provide user support
+    message: You must select if you have in place processes to provide user support

package/frameworks/g-cloud-15/questions/additional-lot-questions/haveIndustryStandardDataSanitisationProcess.yml

@@ -1,6 +1,6 @@
 
-name: Do you have a industry standard data sanitisation process?
-question: Do you have a industry standard data sanitisation process, such as explicit overwriting of storage before reallocation / Secure Erase, degaussing, or physical destruction / hardware containing data is completely destroyed?
+name: Do you have an industry standard data sanitisation process?
+question: Do you have an industry standard data sanitisation process, such as explicit overwriting of storage before reallocation / Secure Erase, degaussing, or physical destruction / hardware containing data is completely destroyed?
 
 type: boolean
 

package/frameworks/g-cloud-15/questions/additional-lot-questions/highLevelProcedureForContractualExit.yml

@@ -0,0 +1,23 @@
+name: Your high level procedure for customer contractual exit
+
+question: Please describe in no more than 250 words your high level procedure for customer contractual exit
+
+question_advice: >
+  You may refer to publicly available documents where relevant, but must describe the content to show your high level procedure
+
+depends:
+  - "on": route
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: textbox_large
+max_length_in_words: 250
+
+validations:
+  - name: answer_required
+    message: You must enter your procedure
+  - name: under_250_words
+    message: Your answer must be no more than 250 words
+  - name: under_character_limit
+    message: Your answer must be no more than 2500 characters

package/frameworks/g-cloud-15/questions/additional-lot-questions/howYouEngageInChangeOfService.yml

@@ -0,0 +1,23 @@
+name: Your high level procedure for customer contractual exit
+
+question: How you engage your customer in a change of service
+
+question_advice: >
+  You may refer to publicly available documents where relevant, but must describe the content to show your high level procedure
+
+depends:
+  - "on": route
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: textbox_large
+max_length_in_words: 250
+
+validations:
+  - name: answer_required
+    message: You must enter how you engage with customers
+  - name: under_250_words
+    message: Your answer must be no more than 250 words
+  - name: under_character_limit
+    message: Your answer must be no more than 2500 characters

package/frameworks/g-cloud-15/questions/additional-lot-questions/knowTheLocations.yml

@@ -10,4 +10,4 @@ type: boolean
 
 validations:
   - name: answer_required
-    message:  You must select if you know the location where the service user data is stored and processed
+    message: You must select if you know the location where the service user data is stored and processed

package/frameworks/g-cloud-15/questions/additional-lot-questions/listMultiqCloudServices.yml

@@ -0,0 +1,29 @@
+id: cloudServices
+name: Cloud service suppliers you intend to resell with evidence
+question: List the cloud service suppliers you intend to resell and identify for each evidence of accreditation or a partnership agreement (this may be in the form of a link to a published list of accredited resellers in which you are included).
+question_advice: >
+  You should list all those organisations whose IaaS or PaaS services you intend to resell, along with web links or uploaded certifications for each.
+
+  You may enter as many as you need.
+
+  You do not need to further describe your resale model, only identify the organisation and your accreditation.
+item_question: Organisation {index}
+number_of_items: 20
+hidden: true
+
+type: list_multiquestion
+column_width: full
+
+questions:
+  - cloudServiceOrganisation
+  - cloudServiceLinkOrUpload
+  - cloudServiceLink
+  - cloudServiceUploadURL
+
+validations:
+  -
+    name: answer_required
+    message: Enter at least one organisation
+  -
+    name: not_unique
+    message: Each organisation must be unique

package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqHaveInPlaceCyberEssentials.yml

@@ -1,5 +1,5 @@
 name: Are you prepared to have in place Cyber Essentials
-question: If the Buyer requires it are you prepared to have in place Cyber Essentials (or equivalent or higher) certification for your Cloud Support services delivered in lots 3
+question: If the Buyer requires it, are you prepared to have in place Cyber Essentials (or equivalent or higher) certification for your Cloud Support services delivered in lots 3
 question_advice: >
   Your response must confirm that if a Buyer requires it you will have in place Cyber Essentials (or equivalent or higher) certification for your Cloud Support services, by confirming that you are prepared to have Cyber Essentials (or equivalent or higher) certification in place, in accordance with the Service Questions in the Standards and Certifications section on the Digital Marketplace
 

package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqQualityCloudServices1b.yml

@@ -3,22 +3,13 @@ name: Quality Cloud Services
 question: CCS requires you to demonstrate your approach to providing quality cloud services to Buyers. Your response must be in relation to the services that are within the scope of the Framework Schedule 1 - Specification, for lot 1b Section 8.2 (Provision of ‘IaaS’ and ‘PaaS’)
 
 question_advice: >
-  All bidders submitting a tender for Lot 1b must answer this question. You must insert
-  your response into the text field in the Digital Marketplace.
+  All bidders submitting a tender for Lot 1b must answer this question. You must insert your response into the text field in the Digital Marketplace.
 
-  Your response should be limited to, and focused on, each of the component parts of the
-  question posed. Please attend to layout, spelling, punctuation and grammar. Address
-  each of the component parts in the order they are listed in this response guidance.
-  You must not make generalised statements or provide irrelevant information.
+  Your response should be limited to, and focused on, each of the component parts of the question posed. Please attend to layout, spelling, punctuation and grammar. Address each of the component parts in the order they are listed in this response guidance. You must not make generalised statements or provide irrelevant information.
 
-  You are required to insert your response to this question in the Digital Marketplace
-  within the text box provided. The response has a permitted word count of 500 words.
-  Please note this word count cannot be exceeded within the Digital Marketplace. No
-  attachments are permitted; any additional documents submitted will be ignored in
-  the assessment of this question.
+  You are required to insert your response to this question in the Digital Marketplace within the text box provided. The response has a permitted word count of 500 words. Please note this word count cannot be exceeded within the Digital Marketplace. No attachments are permitted; any additional documents submitted will be ignored in the assessment of this question.
 
-  If your response is assessed as scoring 0 you will be excluded from further
-  participation in this competition for Lot 1b.
+  If your response is assessed as scoring 0 you will be excluded from further participation in this competition for Lot 1b.
 
 depends:
   - 'on': route
@@ -30,6 +21,3 @@ type: multiquestion
 questions:
   - cloudServicePerformance
   - operationalContinuityEvergreenMaintenance
-
-
-

package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1a.yml

@@ -9,6 +9,7 @@ depends:
 type: multiquestion
 questions:
   - areYouAReseller1a
+  - listMultiqCloudServices
   - iso9001certificationURL
   - areYouReliantForSomeAccreditations
   - iso14001certificationURL

package/frameworks/g-cloud-15/questions/additional-lot-questions/multiqSelectionQuestions1b.yml

@@ -9,6 +9,7 @@ depends:
 type: multiquestion
 questions:
   - areYouAReseller1b
+  - listMultiqCloudServices
   - iso9001certificationURL
   - areYouReliantForSomeAccreditations
   - iso14001certificationURL

package/frameworks/g-cloud-15/questions/additional-lot-questions/operationalContinuityEvergreenMaintenance.yml

@@ -5,12 +5,6 @@ question: Operational Continuity and Evergreen Maintenance
 question_advice: >
   Demonstrate how your cloud solutions will prevent the creation of any new technical debt (the implied cost of additional work in the future) by remaining "evergreen" through continuous updates and improvements. Explain measures which will be undertaken to ensure that the process of continuous updates and improvements will cause minimal disruption and impact to service users providing operational continuity. Reference 6.5.1.8 of Framework Schedule 1 - Specification.
 
-depends:
-  - 'on': route
-    being:
-      - iaas-and-paas
-      - iaas-and-paas-above-official
-
 type: textbox_large
 max_length_in_words: 500
 
@@ -19,5 +13,3 @@ validations:
     message: You must answer this question
   - name: under_500_words
     message: Your answer must be no more than 500 words
-
-

package/frameworks/g-cloud-15/questions/additional-lot-questions/policiesAndControlsInPlace.yml

@@ -0,0 +1,18 @@
+name: Policies and controls in place
+
+question: Do you have policies and controls in place to ensure full compliance with applicable international sanctions, trade restrictions and embargoes as issued by the UK Government and relevant international bodies?
+
+question_advice: >
+  These policies must be available for buyers to access and understand during any call-off procedure, and may be checked or tested by buyers
+
+depends:
+  - "on": route
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: boolean
+
+validations:
+  - name: answer_required
+    message: You must select an option

package/frameworks/g-cloud-15/questions/additional-lot-questions/whenIsUserSupportAvailable.yml

@@ -11,4 +11,4 @@ options:
 
 validations:
   - name: answer_required
-    message:  You must select when is user support is available
+    message: You must select when is user support is available

package/frameworks/g-cloud-15/questions/additional-lot-questions/whereIsDataStoredAndProcessed.yml

@@ -11,4 +11,4 @@ options:
 
 validations:
   - name: answer_required
-    message:  You must select where is service user data stored and processed
+    message: You must select where is service user data stored and processed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccs-digitalmarketplace-frameworks",
-  "version": "5.1.5",
+  "version": "5.1.7",
   "description": "Data files for Digital Marketplace’s procurement frameworks",
   "repository": {
     "type": "git",