Clarifications

116. Hello, I have searched through the bid pack and I am unable to find clarification. Does a ISO 27001 Certification supersede the need for a Cyber Essentials basic? Or is the Cyber Essentials certificate still required?

115. r.e. Joint Schedule 3 - Article 1.3, specifically, ''The Supplier shall ensure that the public and products liability policy contain an indemnity to principals clause under which the Relevant Authority shall be indemnified in respect of claims made against the Relevant Authority in respect of death or bodily injury or third party property damage arising out of or in connection with the Deliverables and for which the Supplier is legally liable. '' Is it mandatory to have the indemnity to principals clause within our public and products liability policy?

114. In Article 7.5 and 8.3 we note there is no limit to the indemnity. Could you please clarify if this article is covered by Articles 11.1 (Each Party's total aggregate liability in each Contract Year under this DPS Contract is no more than £100,000) and 11.2 (Each Party's total aggregate liability in each Contract Year under each Order Contract is no more than the greater of £1 million or 150% of the Estimated Yearly Charges unless specified in the Order Form)?

113. Nothing is foreseen within the Core Terms Article 10.3 regarding the payment for the work already performed. Please could you clarify if there would be payment for the work already performed?

112. r.e. Article 1.3, is it mandatory to have the indemnity to principals clause within our public and products liability policy?

111. Regarding Joint Schedule 8 Article 2.1 Please could you confirm that a company can be the guarantor (where it is stated that the guarantor shall be ''any person acceptable to CCS/Buyer to give a DPS/Order Guarantee'')? And can there be a limit of amount?

110. Regarding DPS Core Terms 3.2.11 With respect to article 3.2.11. You state: "The Buyer can cancel any order or part order of Goods which has not been Delivered. If the Buyer gives less than 14 days notice then it will pay the Supplier's reasonable and proven costs already incurred...". Can you confirm that if the Buyer cancels an order through no fault of the Supplier but the Supplier has incurred costs then the costs can be recovered even if more than 14 days is given?

109. Could you please clarify question 180: 'Upload documentary evidence for a certificate for each principal contract for goods and/or services provided in the last 3 years'. Can you provide guidance on what is expected of such a certificate and what it should contain?

108. I am applying for RM6235 -Space Enabled & Geospatial Services Dynamic Purchasing System Agreement. I've looked in the documentation but I can't find any guidance on question 180: 'Upload documentary evidence for a certificate for each principal contract for goods and/or services provided in the last 3 years'. Can you provide guidance on what is expected of such a certificate and what it should contain?

106. The CCS frameworks website lists "managed security services including crest accredited Security Operations Centre (SOC) and managed detection and response". The Services Matrix v3 in the Bid Pack v4 does not have SOC and MDR listed. Can you please confirm if Buyers can buy SOC and MDR services through this framework? If so, how many Orders have been placed for these services to date?

105. Both of the previous two questions regarding submitting evidence and parent company guarantee relate to the supporting evidence requested by CCS, not the Cyber Security DPS SQ itself.

104. CCS has requested a parent company guarantee, our parent company is purely for shareholding purposes and all revenue is generated and managed through the company making the application, What action should we take?

103. How do I share the evidence that's been requested? I can't see anywhere to attach or submit our insurance certificates etc.

101. Where can I get a list of supplier contact details?

100. Is CCS willing to make the same changes to RM3764iii under the Framework Award Form as they have done under RM3808? This would involve amendments to Clauses 3.2.2, 3.2.11, 8.7 and 10.3.2 of the Core terms DPS?

99. With reference to Clarification Question 22, please could you advise where the requirement for supplier employees to be BPSS cleared is stated in the Bid Pack? Many thanks

98. I am unclear on how customers engage us through this DPS. If we had a customer who wished to buy cyber security solutions through us and their procurement rules allowed them to, could they choose to award directly via this framework because we are pre-approved etc?

97. Hi, Please can you confirm if /where buyers can determine if a supplier is NCSC Assured or not? Regards

96. We were appointed on the Cyber Security Services 3 DPS earlier this month. To date we have not seen any call off opportunities. We have also been appointed recently on the AI DPS (RM6200) and the Automation DPS (RM6173) and we have not seen any call off contracts for those either. Can you please clarify how call off opportunities will be sent to us (ie by email or do we have to search for them on the portal)? Can you also confirm that our status of "Appointed" means that we are now eligible to receive notifications of call off contracts on these DPS's or is there a back end process that must still be completed before we will be notified of opportunities under the DPS?

95. With regards to the documentary evidence required for the parent company guarantee in question 172 of the SQ Evidence Submission, would a letter from the parent company confirming the guarantee meet the requirement or is a specific document format required? We are also pursuing the AI DPS (RM6200) and the Automation DPS (RM6173) in due course and request clarity on whether this answer would apply to those DPS's evidence submissions as well?