Clarifications
There are 127 clarifications for this DPS
97. 1.Please could CCS provide a copy of the Supplier Code of Conduct referred to in the questionnaire part 3?
2.Please could CCS provide active links to those documents or websites referred to in the Buyer Needs document under paragraph 3: Guidelines and standards for the delivery of AI services?
Supplier code of conduct link here: https://assets.publishing.service.gov.uk/media/648c3ab5b32b9e000ca968c3/Supplier_Code_of_Conduct_v3.pdf Please note that there will be some documents in the bid pack which have been replaced or updated given that the DPS went live almost 4 years ago, therefore please could you advise which links it is you need?
Answered
14/03/2024 13:54
96. Regarding RM6200, could CCS confirm how a Supplier will deliver any projects under this framework with a US sub-contractor if Order Schedule 23 is applied? Would overseas authorised sub-contractors be permitted to work on Secret Matters?
The order schedules apply to the contract between yourselves and the buyer. Please note that if Order Schedule 23 applies and there are any requirements in relation to Secret Matters then these would be detailed in the Buyers requirements when they issue their tender documentation. It would be down to the individual contracting authority to decide whether they would allow overseas subcontractors to work on secret matters.
Answered
14/03/2024 13:54
95. Extension Request:
Please may we request an extension to the submission deadline of 5 working Days?
The Artificial Intelligence DPS does not expire until 04/11/2024 and suppliers can apply to join the DPS at any point during the lifetime that the agreement is live.
Answered
28/02/2024 11:26
94. Can you provide an insight into the type of opportunities which are let through the DPS?
This is not something that can be advised on.
Answered
16/02/2024 14:27
93. What percentage of suppliers have spend via this DPS?
As this is commercially sensitive information this is not something that can be provided to suppliers
Answered
16/02/2024 14:26
92. What is the range of values of the competitions/procurements via the DPS (smallest to largest)?
As this is commercially sensitive information this is not something that can be provided to suppliers
Answered
16/02/2024 14:26
91. What is the average size of each procurement?
This is not something that can be advised on.
Answered
16/02/2024 14:26
90. How much spend goes through the DPS annually?
As this is commercially sensitive information this is not something that can be provided to suppliers
Answered
16/02/2024 14:25
89. If the main bidder has Cyber Essentials and we plan to use a sub-contractor in the EU, do they also need to obtain Cyber Essentials, or can EU firms rely on ISO27001?
DPS Schedule 9 - Cyber Essentials states that 'The Supplier shall ensure that all Sub-Contracts with Subcontractors who
Process Cyber Essentials Data contain provisions no less onerous on the Subcontractors than those imposed on the Supplier under this Contract in
respect of the Cyber Essentials Scheme under Paragraph 2.1 of this Schedule. ' Please remember that any risk associated with subcontracting is responsibility of the Prime.
Answered
19/01/2024 12:47
88. We are going through the SQ process currently. Can you explain "Part 1 Professional or Trade Registers Details", where it asks "1.2.1. What is the name of the register?" - can you advise on which register this refers to?
The name refers to any professional or trade register that you may be registered with in the UK
Answered
19/01/2024 12:46
87. The bid pack makes reference to the supplier's "Data Protection Officer" in the DPS Joint Schedules (1 and 11); the Appointment Form; and DPSQ (question 78). In the Joint Schedules 11, clause 11 it appears that a DPO only needs to be appointed where required by law. The other references appear to make it mandatory to have a DPO in order to register under the DPS.
We do not have a DPO because we are not legally required to have one for the work we currently undertake. We would not apply for any work under the DPS which legally required us to have a DPO.
Please could you clarify whether it is a requirement to have a DPO in order to register with the DPS and/or whether it is necessary to enter into a contract with a buyer. If it is not mandatory we assume that we can answer DPSQ question 78 and the appointment form fields with 'N/A'.
Having a DPO is only necessary where required by legislation (as stated in Joint Schedule 11 'Processing Data'. Not having one does not preclude you from joining the DPS, however you would not be able to bid for work where a DPO was part of the requirements.
Answered
07/12/2023 11:36
86. The 'Buyer Needs' document lists several technical standards which must be complied with in order to register with the DPS. ("comply with the appropriate Standards (or equivalent)")
Please could you confirm whether the supplier must hold a certificate for each of these standards in order to register with the DPS. Please could you confirm whether the supplier must hold a certificate for each of these standards in order to enter into a contract with a buyer. The relevant standards are:- BS EN ISO 9001; BS 7858:2012; ISO 10007; BS EN ISO 14001; ISO/IEC 13066-1:2011; and ETSI TS 103 645.
You do not need to have all of these standards in place in order to join the DPS. However, you will need to have the relevant standards in place where you are bidding for work under the DPS and the customer has stated that this is a requirement of their call off.
Answered
14/12/2023 13:35
85. How can Suppliers know their specified minimum financial threshold score? Can you provide any website links for accessing this information?
Additionally, our UK entity has an annual turnover of £700,000, while our headquarters reports a turnover of £8,229,462.
You would need to contact Dun & Bradstreet with regards to your financial score.
Answered
27/11/2023 11:54
84. In the Supplier Needs document, there is a selection process that includes Pass/Fail questions concerning a specified minimum financial threshold. The supplier must satisfy this requirement. Could you kindly guide how the supplier can achieve a minimum score of 35?
Your assistance in this matter would be highly valued.
It is all to do with their Dun and Bradstreet score which is essentially a credit check using their financial information such as accounts, Companies House returns etc
Answered
06/11/2023 12:58
83. Is it possible to view Contract Notices from the previous year that pertain to contract values associated with a Dynamic Purchasing System (DPS)? Can you provide guidance on how to access this information?
Please be aware that award notices for call offs from any Crown Commercial Service framework agreements would be published on Contracts Finder and Find A Tender (the latter being only for DPS call offs). These are not located within SRS and you would need to access Contracts Finder and/or Find A Tender directly and by using the same logins you have for SRS.
Answered
11/10/2023 16:27
81. I've reviewed the DPS Supplier Needs document. Do we need to submit the Cyber Essentials certification only after being appointed as a supplier, or do we need to provide it when applying in response to the Selection question? Please confirm.
Cyber Essentials is a mandatory requirement and needs to be provided within the application stage for the DPS.
Answered
03/10/2023 13:31
80. Regarding supporting evidence documents, is it sufficient to provide only the Cyber Essentials certification, or are there any additional supporting documents required? Please clarify.
Please see the below list of insurances which are a mandatory requirement: - Employer's (Compulsory) Liability Insurance of £5,000,000.00 minimum - Public Liability Insurance of £1,000,000.00 minimum - Professional Indemnity Insurance of £1,000,000.00 minimum - Cyber Essentials or Cyber Essentials Plus
Please also review and read the Bid Pack.
Answered
03/10/2023 13:33
79. As a service-oriented organization, we intend to provide services exclusively under this contract. Is it truly necessary for us to acquire a product liability insurance certificate, or can we proceed without it?
Please see the below list of insurances which are a mandatory requirement:
- Employer's (Compulsory) Liability Insurance of £5,000,000.00 minimum
- Public Liability Insurance of £1,000,000.00 minimum
- Professional Indemnity Insurance of £1,000,000.00 minimum
- Cyber Essentials or Cyber Essentials Plus
Answered
07/09/2023 10:00
78. We have completed the standard selection questionnaire and can click on 'save and continue'. When we do we are directed to the start of another questionnaire - however it is not labelled DPSQ anywhere. In fact we are asked to give the questionnaire a name and description which doesn't sound right. Can you confirm that we should see DPSQ referenced somewhere? If this sounds like something has failed, can you advise us what we need to do to be able to access the DPSQ?
Please see the link below for the CCS Website, which has all the current DPS frameworks:
https://supplierregistration.cabinetoffice.gov.uk/dps
If you click on the header that the DPS you wish to apply for falls under, it will then open up a new page with the DPS that fall under that header. Against the required DPS, you then need to click on "Access as a supplier".
This will then take you to a log in page for Supplier Registration Service (SRS). If you have login details for Contracts Finder, then you can use these log in credentials to access SRS. If not, located in the top right hand corner, you should see "Register" - click on this and follow the onscreen instructions to register for an account on SRS.
Please also review the Bid Pack which can also be obtained from the link above, prior to submitting an application for the DPS.
Answered
01/09/2023 13:18
77. In relation to obtaining the Cyber Essentials Basic certification, we are currently certified under the ISO 27001 standard and have structured our security protocols according to the guidelines of the NIST Cybersecurity Framework. Furthermore, our ISO 27001 certification, which has been granted by a trusted third party, explicitly verifies that we fulfill all five stipulations outlined in the Cyber Essentials scheme. Is it possible for us to move forward with these existing certifications as part of our application for the Cyber Essentials Basic certification?
Your guidance and support in this matter would be highly valued.
Cyber Essentials certification is a mandatory requirement of the DPS. Please note that Cyber Essentials was developed because neither ISO27001 nor other considered standards were sufficiently prescriptive to defeat common internet based threats as per the PPN.
Answered
01/09/2023 13:15
