ccs-digitalmarketplace-frameworks 5.3.3 → 5.4.0

package/frameworks/g-cloud-15/manifests/assessed_additional_lot_questions.yml

@@ -0,0 +1,17 @@
+-
+  name: "Mandatory award criteria for Lots 2a and/or 2b"
+  assessment_key: awardCriteria
+  questions:
+    - multiqHowYouWillProvideUserSupportCloudSoftware
+    - multiqHowYouWillProvideAssetProtection
+    - multiqWhatFrequencyWillPenTestingBeConducted
+    - multiqHowYouWillProvideSataSanitisation
+
+-
+  name: "Mandatory award criteria for Lot 3"
+  assessment_key: awardCriteria
+  questions:
+    - multiqHowYouWillProvideUserSupportCloudSupport
+    - multiqHowDoYouManageStaffSecurityClearanceChecks
+    - multiqWhatLevelOfSecurityClearance
+    - multiqHaveInPlaceCyberEssentials

package/frameworks/g-cloud-15/manifests/assessed_lot_pricing.yml

@@ -0,0 +1,77 @@
+- name: Price for onboarding
+  assessment_key: priceForOnboarding
+  questions:
+    - multiqPriceForOnboarding
+
+- name: Discount
+  assessment_key: discount
+  questions:
+    - discountPercentageLot1
+
+- name: Pricing
+  assessment_key: pricing
+  questions:
+    - multiqArchitectureRolesBusinessArchitect
+    - multiqArchitectureRolesDataArchitect
+    - multiqArchitectureRolesEnterpriseArchitect
+    - multiqArchitectureRolesNetworkArchitect
+    - multiqArchitectureRolesSecurityArchitect
+    - multiqArchitectureRolesSolutionArchitect
+    - multiqArchitectureRolesTechnicalArchitect
+    - multiqChiefDigitalAndDataRolesChiefDataOfficer
+    - multiqChiefDigitalAndDataRolesChiefInformationSecurityOfficer
+    - multiqChiefDigitalAndDataRolesChiefTechnologyOfficer
+    - multiqCyberSecurityRolesCyberSecurityAuditAndAssurance
+    - multiqCyberSecurityRolesCyberSecurityGovernanceAndRiskManagement
+    - multiqCyberSecurityRolesCyberSecurityMonitoring
+    - multiqCyberSecurityRolesCyberSecurityIncidentResponse
+    - multiqCyberSecurityRolesCyberSecurityVulnerabilityManagement
+    - multiqCyberSecurityRolesCyberSecurityDigitalForensics
+    - multiqCyberSecurityRolesCyberSecurityTesting
+    - multiqCyberSecurityRolesCyberSecuritySecureDesign
+    - multiqDataRolesAnalyticsEngineer
+    - multiqDataRolesDataAnalyst
+    - multiqDataRolesDataEngineer
+    - multiqDataRolesDataEthicist
+    - multiqDataRolesDataGovernanceManager
+    - multiqDataRolesDataScientist
+    - multiqDataRolesMachineLearningEngineer
+    - multiqDataRolesPerformanceAnalyst
+    - multiqItOperationsRolesApplicationOperationsEngineer
+    - multiqItOperationsRolesBusinessRelationshipManager
+    - multiqItOperationsRolesChangeAndReleaseManager
+    - multiqItOperationsRolesCommandAndControlCentreManager
+    - multiqItOperationsRolesEndUserComputingEngineer
+    - multiqItOperationsRolesItServiceManager
+    - multiqItOperationsRolesIncidentManager
+    - multiqItOperationsRolesInfrastructureEngineer
+    - multiqItOperationsRolesInfrastructureOperationsEngineer
+    - multiqItOperationsRolesProblemManager
+    - multiqItOperationsRolesServiceDeskManager
+    - multiqItOperationsRolesServiceTransitionManager
+    - multiqProductAndDeliveryRolesBusinessAnalyst
+    - multiqProductAndDeliveryRolesDeliveryManager
+    - multiqProductAndDeliveryRolesDigitalPortfolioManager
+    - multiqProductAndDeliveryRolesProductManager
+    - multiqProductAndDeliveryRolesProgrammeDeliveryManager
+    - multiqProductAndDeliveryRolesServiceOwner
+    - multiqQualityAssuranceTestingRolesQualityAssuranceTestingAnalyst
+    - multiqQualityAssuranceTestingRolesTestEngineer
+    - multiqQualityAssuranceTestingRolesTestManager
+    - multiqSoftwareDevelopmentRolesDevelopmentOperationsEngineer
+    - multiqSoftwareDevelopmentRolesFrontendDeveloper
+    - multiqSoftwareDevelopmentRolesSoftwareDeveloper
+    - multiqUserCentredDesignRolesAccessibilitySpecialist
+    - multiqUserCentredDesignRolesContentDesigner
+    - multiqUserCentredDesignRolesContentStrategist
+    - multiqUserCentredDesignRolesGraphicDesigner
+    - multiqUserCentredDesignRolesInteractionDesigner
+    - multiqUserCentredDesignRolesServiceDesigner
+    - multiqUserCentredDesignRolesTechnicalWriter
+    - multiqUserCentredDesignRolesUserResearcher
+    - discountPercentagesLessThan250000
+    - discountPercentagesLessThan500000
+    - discountPercentagesLessThan1000000
+    - discountPercentagesLessThan2500000
+    - discountPercentagesLessThan5000000
+    - discountPercentagesOver5000000

package/frameworks/g-cloud-15/manifests/assessment.yml

@@ -0,0 +1,45 @@
+-
+  name: Social value
+  questions:
+    - socialValueScore
+    - socialValueComment
+
+-
+  name: Quality Cloud Services
+  questions:
+    - qualityCloudServicesScore
+    - qualityCloudServicesComment
+
+-
+  name: Maximising Buyer Value
+  questions:
+    - maximisingBuyerValueScore
+    - maximisingBuyerValueComment
+
+-
+  name: Price for onboarding
+  questions:
+    - priceForOnboardingScore
+    - priceForOnboardingComment
+
+-
+  name: Discount
+  questions:
+    - discountScore
+    - discountComment
+
+-
+  name: Award criteria
+  questions:
+    - awardCriteriaLot2Score
+    - awardCriteriaLot2Comment
+    - awardCriteriaLot3Score
+    - awardCriteriaLot3Comment
+
+-
+  name: Pricing
+  questions:
+    - pricingLot2Score
+    - pricingLot2Comment
+    - pricingLot3Score
+    - pricingLot3Comment

package/frameworks/g-cloud-15/questions/additional-lot-questions/accessToInnovationAndTechnicalAdvancement.yml

@@ -3,7 +3,7 @@ name: c) Access to Innovation and Technical Advancement
 question: 'c) Access to Innovation and Technical Advancement:'
 
 question_advice: >
-  Demonstrate how you will support Buyers to access innovation to inform both their technology strategy and business service delivery. Your response must clearly describe how you will provide or enable access to emerging technologies including new and innovative approaches to operating their cloud service. Reference 6.5.1.10 of Framework Schedule 1 - Specification.
+  Demonstrate how you will support Buyers to access innovation to inform both their technology strategy and business service delivery. Your response must clearly describe how you will provide or enable access to emerging technologies including new and innovative approaches to operating their cloud service. Reference 6.6.1(m) of Framework Schedule 1 - Specification.
 
 type: textbox_large
 max_length_in_words: 250

package/frameworks/g-cloud-15/questions/additional-lot-questions/accountManagementAndBillingTransparency.yml

@@ -3,7 +3,7 @@ name: a) Account Management and Billing Transparency/Optimisation
 question: 'a) Account Management and Billing Transparency/Optimisation:'
 
 question_advice: >
-  Explain how you will enable Buyers to understand and optimise their service usage and costs. Your response must clearly describe the specific tools, processes or services you will provide, your approach to standardised and transparent billing, and explain how these will help Buyers monitor usage and manage financial expenditure. Reference 6.5.1.7 of Framework Schedule 1 - Specification.
+  Explain how you will enable Buyers to understand and optimise their service usage and costs. Your response must clearly describe the specific tools, processes or services you will provide, your approach to standardised and transparent billing, and explain how these will help Buyers monitor usage and manage financial expenditure. Reference 6.6.1(i) of Framework Schedule 1 - Specification.
 
 type: textbox_large
 max_length_in_words: 250

package/frameworks/g-cloud-15/questions/additional-lot-questions/cloudServicePerformance.yml

@@ -2,7 +2,7 @@ name: a) Cloud service performance
 question: 'a) Cloud service performance:'
 
 question_advice: >
-  Explain how your technology and processes will ensure that your services will perform in the critical areas of scalability and reliability, to meet buyer requirements. Clearly demonstrate relevant performance targets that you will provide, along with the measures, processes and controls that you will use to meet them. Reference 6.5.1.4 of Framework Schedule 1 - Specification.
+  Explain how your technology and processes will ensure that your services will perform in the critical areas of scalability and reliability, to meet buyer requirements. Clearly demonstrate relevant performance targets that you will provide, along with the measures, processes and controls that you will use to meet them. Reference 6.6.1(f) of Framework Schedule 1 - Specification.
 
 type: textbox_large
 

package/frameworks/g-cloud-15/questions/additional-lot-questions/haveInPlaceCyberEssentialsCertification.yml

@@ -4,6 +4,14 @@ question: Are you prepared to have in place Cyber Essentials (or equivalent or h
 
 type: boolean
 
+assessment_criteria:
+  available_score: 100
+  score_conditions:
+    - value: true
+      weighting: 1
+    - value: false
+      weighting: 0
+
 validations:
   - name: answer_required
     message: You must select if you are you prepared to have in place Cyber Essentials certification

package/frameworks/g-cloud-15/questions/additional-lot-questions/haveIndustryStandardDataSanitisationProcess.yml

@@ -4,6 +4,14 @@ question: Do you have an industry standard data sanitisation process, such as ex
 
 type: boolean
 
+assessment_criteria:
+  available_score: 100
+  score_conditions:
+    - value: true
+      weighting: 1
+    - value: false
+      weighting: 0
+
 validations:
   - name: answer_required
     message: You must select if you have a industry standard data sanitisation process

package/frameworks/g-cloud-15/questions/additional-lot-questions/howAreStaffSecurityChecksPerformed.yml

@@ -10,6 +10,14 @@ options:
   - label: Staff screening performed but doesn’t conform with BS7858:2019
     value: does-not-conform-to-bs
 
+assessment_criteria:
+  available_score: 100
+  score_conditions:
+    - value: conforms-to-bs
+      weighting: 1
+    - value: does-not-conform-to-bs
+      weighting: 0.25
+
 validations:
   - name: answer_required
     message: You must select how are staff security checks performed

package/frameworks/g-cloud-15/questions/additional-lot-questions/howOftenWillPenTestingBeConducted.yml

@@ -9,6 +9,16 @@ options:
   - label: At least once a year
   - label: Less than once a year
 
+assessment_criteria:
+  available_score: 100
+  score_conditions:
+    - value: At least every 6 months
+      weighting: 1
+    - value: At least once a year
+      weighting: 0.5
+    - value: Less than once a year
+      weighting: 0.25
+
 validations:
   - name: answer_required
     message: You must select how often will penetration testing be conducted

package/frameworks/g-cloud-15/questions/additional-lot-questions/howYouEngageInChangeOfService.yml

@@ -3,7 +3,7 @@ name: How you engage your customer in a change of service
 question: |
   <legend class="govuk-fieldset__legend--m">
   Please describe in no more than 250 words how you engage your customer in a change of service and how you ensure backward compatibility.<br>
-  Reference 6.5.1.8.1 of Framework Schedule 1 - Specification
+  Reference 6.6.1(k) of Framework Schedule 1 - Specification
   </legend>
 
 question_advice: >

package/frameworks/g-cloud-15/questions/additional-lot-questions/operationalContinuityEvergreenMaintenance.yml

@@ -3,7 +3,7 @@ name: b) Operational Continuity and Evergreen Maintenance
 question: 'b) Operational Continuity and Evergreen Maintenance:'
 
 question_advice: >
-  Demonstrate how your cloud solutions will prevent the creation of any new technical debt ('Technical debt' is the hidden cost of adopting short term design decisions instead of long term solutions, including the implied cost of additional work in the future) by remaining "evergreen" through continuous updates and improvements. Explain measures which will be undertaken to ensure that the process of continuous updates and improvements will cause minimal disruption and impact to service users providing operational continuity. Reference 6.5.1.8 of Framework Schedule 1 - Specification.
+  Demonstrate how your cloud solutions will prevent the creation of any new technical debt ('Technical debt' is the hidden cost of adopting short term design decisions instead of long term solutions, including the implied cost of additional work in the future) by remaining "evergreen" through continuous updates and improvements. Explain measures which will be undertaken to ensure that the process of continuous updates and improvements will cause minimal disruption and impact to service users providing operational continuity. Reference 6.6.1(j) of Framework Schedule 1 - Specification.
 
 type: textbox_large
 max_length_in_words: 250

package/frameworks/g-cloud-15/questions/additional-lot-questions/technologySupportAndUserEnablement.yml

@@ -3,7 +3,7 @@ name: b) Technology Support and User Enablement
 question: 'b) Technology Support and User Enablement:'
 
 question_advice: |
-  Demonstrate how you will equip users with the skills and knowledge to maximise the effectiveness of your cloud solution. Your response must clearly describe the support services and training initiatives you will offer, including how they are accessed, to enhance user proficiency and ensure efficient utilisation of your services. Reference 6.5.1.9 of Framework Schedule 1 - Specification.
+  Demonstrate how you will equip users with the skills and knowledge to maximise the effectiveness of your cloud solution. Your response must clearly describe the support services and training initiatives you will offer, including how they are accessed, to enhance user proficiency and ensure efficient utilisation of your services. Reference 6.6.1(l) of Framework Schedule 1 - Specification.
 
 type: textbox_large
 max_length_in_words: 250

package/frameworks/g-cloud-15/questions/additional-lot-questions/whatLevelOfStaffSecurityClearance.yml

@@ -12,6 +12,16 @@ options:
   - label: Up to Baseline Personnel Security Standard (BPSS)
     value: bpss
 
+assessment_criteria:
+  available_score: 100
+  score_conditions:
+    - value: dv
+      weighting: 1
+    - value: sc
+      weighting: 0.5
+    - value: bpss
+      weighting: 0.25
+
 validations:
   - name: answer_required
     message: You must select what level of staff security clearance are you prepared to have in place

package/frameworks/g-cloud-15/questions/additional-lot-questions/whenIsUserSupportAvailable.yml

@@ -9,6 +9,16 @@ options:
   - label: 9 to 5 (UK time), 7 days a week
   - label: 9 to 5 (UK time), Monday to Friday
 
+assessment_criteria:
+  available_score: 100
+  score_conditions:
+    - value: 24 hours, 7 days a week
+      weighting: 1
+    - value: 9 to 5 (UK time), 7 days a week
+      weighting: 0.5
+    - value: 9 to 5 (UK time), Monday to Friday
+      weighting: 0.25
+
 validations:
   - name: answer_required
     message: You must select when is user support is available

package/frameworks/g-cloud-15/questions/additional-lot-questions/whereIsDataStoredAndProcessed.yml

@@ -9,6 +9,16 @@ options:
   - label: European Economic Area (EEA)
   - label: Other
 
+assessment_criteria:
+  available_score: 100
+  score_conditions:
+    - value: United Kingdom
+      weighting: 1
+    - value: European Economic Area (EEA)
+      weighting: 0.5
+    - value: Other
+      weighting: 0.25
+
 validations:
   - name: answer_required
     message: You must select where is service user data stored and processed

package/frameworks/g-cloud-15/questions/assessment/awardCriteriaLot2Comment.yml

@@ -0,0 +1,9 @@
+id: awardCriteriaComment
+question: Award criteria
+depends:
+  - "on": "lot"
+    being:
+      - isaas
+      - saas
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/awardCriteriaLot2Score.yml

@@ -0,0 +1,14 @@
+id: awardCriteriaScore
+question: Award criteria
+depends:
+  - "on": "lot"
+    being:
+      - isaas
+      - saas
+
+type: assessment_score
+
+assessment_settings:
+  type: calculated
+  model: evaluation
+  weighting: 10

package/frameworks/g-cloud-15/questions/assessment/awardCriteriaLot3Comment.yml

@@ -0,0 +1,8 @@
+id: awardCriteriaComment
+question: Award criteria
+depends:
+  - "on": "lot"
+    being:
+      - cloud-support
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/awardCriteriaLot3Score.yml

@@ -0,0 +1,13 @@
+id: awardCriteriaScore
+question: Award criteria
+depends:
+  - "on": "lot"
+    being:
+      - cloud-support
+
+type: assessment_score
+
+assessment_settings:
+  type: calculated
+  model: evaluation
+  weighting: 10

package/frameworks/g-cloud-15/questions/assessment/discountComment.yml

@@ -0,0 +1,8 @@
+question: Discount
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/discountScore.yml

@@ -0,0 +1,13 @@
+question: Discount
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_score
+
+assessment_settings:
+  type: calculated
+  model: pricing
+  weighting: 5

package/frameworks/g-cloud-15/questions/assessment/maximisingBuyerValueComment.yml

@@ -0,0 +1,8 @@
+question: Maximising Buyer Value
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/maximisingBuyerValueScore.yml

@@ -0,0 +1,13 @@
+question: Maximising Buyer Value
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_score
+
+assessment_settings:
+  type: manual
+  model: evaluation
+  weighting: 40

package/frameworks/g-cloud-15/questions/assessment/priceForOnboardingComment.yml

@@ -0,0 +1,8 @@
+question: Price for onboarding
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/priceForOnboardingScore.yml

@@ -0,0 +1,13 @@
+question: Price for onboarding
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_score
+
+assessment_settings:
+  type: calculated
+  model: pricing
+  weighting: 5

package/frameworks/g-cloud-15/questions/assessment/pricingLot2Comment.yml

@@ -0,0 +1,9 @@
+id: pricingComment
+question: Pricing
+depends:
+  - "on": "lot"
+    being:
+      - isaas
+      - saas
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/pricingLot2Score.yml

@@ -0,0 +1,14 @@
+id: pricingScore
+question: Pricing
+depends:
+  - "on": "lot"
+    being:
+      - isaas
+      - saas
+
+type: assessment_score
+
+assessment_settings:
+  type: calculated
+  model: pricing
+  weighting: 80

package/frameworks/g-cloud-15/questions/assessment/pricingLot3Comment.yml

@@ -0,0 +1,8 @@
+id: pricingComment
+question: Pricing
+depends:
+  - "on": "lot"
+    being:
+      - cloud-support
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/pricingLot3Score.yml

@@ -0,0 +1,13 @@
+id: pricingScore
+question: Pricing
+depends:
+  - "on": "lot"
+    being:
+      - cloud-support
+
+type: assessment_score
+
+assessment_settings:
+  type: calculated
+  model: pricing
+  weighting: 80

package/frameworks/g-cloud-15/questions/assessment/qualityCloudServicesComment.yml

@@ -0,0 +1,8 @@
+question: Quality Cloud Services
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/qualityCloudServicesScore.yml

@@ -0,0 +1,13 @@
+question: Quality Cloud Services
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+
+type: assessment_score
+
+assessment_settings:
+  type: manual
+  model: evaluation
+  weighting: 40

package/frameworks/g-cloud-15/questions/assessment/socialValueComment.yml

@@ -0,0 +1,11 @@
+question: Social value
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+      - isaas
+      - saas
+      - cloud-support
+
+type: assessment_comment

package/frameworks/g-cloud-15/questions/assessment/socialValueScore.yml

@@ -0,0 +1,16 @@
+question: Social value
+depends:
+  - "on": "lot"
+    being:
+      - iaas-and-paas
+      - iaas-and-paas-above-official
+      - isaas
+      - saas
+      - cloud-support
+
+type: assessment_score
+
+assessment_settings:
+  type: automatic
+  model: declaration
+  weighting: 10

package/frameworks/g-cloud-15/questions/declaration/subcontractorRegisteredDate.yml

@@ -1,17 +1,10 @@
 name: Registered date
 question: What is the date/ equivalent date your subcontractor registered under the Companies Act 2006?
-hint: Must be after 1st of October 2009
 
 type: date
-limits:
-  after_date: '2009-10-01'
 
 validations:
   - name: answer_required
     message: 'You must enter subcontractor’s registered date'
-  - name: date_not_in_range
-    message: You must enter a valid date later than 1st October 2009
   - name: invalid_format
-    message: You must enter a valid date later than 1st October 2009
-
-
+    message: You must enter a valid date, for example 1 10 2009

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccs-digitalmarketplace-frameworks",
-  "version": "5.3.3",
+  "version": "5.4.0",
   "description": "Data files for Digital Marketplace’s procurement frameworks",
   "repository": {
     "type": "git",