1. Home
  2. DPS marketplace
  3. Cyber Security Services 3 DPS

There are 154 clarifications for this DPS

170. 12.Are there any planned extensions beyond the currently published DPS end date of 13 February 2029?

There are no planned extensions beyond 13th February 2029.
Answered
31/07/2026 11:16

169. 11.Are there any current government priority areas expected to drive significant future demand through the DPS?

Responded to clarification directly
Answered
31/07/2026 11:17

168. 10.What is the average contract value awarded through the DPS by service category?

Responded to clarification directly
Answered
31/07/2026 11:17

167. 9.How many buyers have actively used the DPS during the last 24 months?

Responded to clarification directly
Answered
31/07/2026 11:18

166. 8.Does CCS publish management information on supplier utilisation, contract awards and competition volumes under RM3764iii?

Answered clarification directly
Answered
31/07/2026 11:19

165. 7.For GovAssure and Cyber Resilience Audit services, are there any additional onboarding or quality assurance requirements beyond those stated in the Buyer Needs document?

The requirements for the CRA scheme are detailed within the Buyer Needs document
Answered
31/07/2026 11:20

164. 6.What proportion of competitions are awarded using quality-only, quality/price weighting, or capability assessment methodologies?

Please refer to DPS Schedule 7 - Order Procedure which details the weighting percentages. Quality 90-60% and Price 10-40%
Answered
31/07/2026 11:32

163. 5.Are there any planned category additions or filter changes before the DPS expiry date?

Answered clarification directly
Answered
31/07/2026 11:33

162. 4.What percentage of competitions included Security Check (SC) or Developed Vetting (DV) clearance requirements?

Answered clarification directly
Answered
31/07/2026 11:40

161. 3.How many competitions were issued during the previous 12 months across each service category?

Answered clarification directly
Answered
31/07/2026 11:42

160. 2.What has been the annual spend through the DPS during the last three years across each service category?

Answered clarification directly
Answered
31/07/2026 11:43

159. 1.How many suppliers are currently appointed to RM3764iii across each service category?

Answered clarification directly
Answered
31/07/2026 11:43

158. We are in the process of undergoing a company restructure whereby our current company will become a Holding company and all our work will move to a newly created wholly owned subsidiary. We would like to remain on this Framework - are we able to transfer our details across? Our skills, experience history, capabilities, vast majority of information in our application questionnaire remains unchanged, the only changes are to company name/number/Dunn/most recent P/L figures. Thank you.

Firstly please email info@gca.gov.uk with details of the company and restructure. GCA can then confirm next steps regarding the Cyber DPS.
Answered
30/04/2026 16:38

157. We have a customer who has said they have asked a 'request for information' ... how do we access this?

Requests for Information can be sent out by customers in a number of ways including via email, their own sourcing portal or via the CCS eSourcing portal (https://crowncommercialservice.bravosolution.co.uk/web/login.html) It is worth clarifying with the customer how this was sent.
Answered
31/03/2026 12:09

156. Please can you advise the process for adding new key-subcontractors at a DPS level where the supplier is already appointed to the DPS? We'd like to add sub-contractors (further to those already named during our initial application) so that they can be used from the outset when bidding for new further competitions. We have referred to DPS Schedule 6 (Key Subcontractors), but that appears to be specific to adding subcontractors as and when required to fulfil specific call-off opportunities requirements.

To add subcontractors, please complete 'Attachment 4 - Additional Subcontractor(s) v1' within the bid pack and send the completed template to info@crowncommercial.gov.uk.
Answered
23/03/2026 11:39

155. We are entering details for a non-UK subcontractor (Georgia). The system requires a valid UK postcode format and UK-style company registration number format. Please confirm how foreign subcontractor registration details should be entered in these fields where validation prevents submission.

If you are not based in the UK, you can use the Royal Mail postcode EC1A 1AA as a generic postcode and the 8 digit number "00000000" as a dummy number for the UK Companies House Registration number if required.
Answered
02/03/2026 14:59

154. Hi, We are undertaking an application and would like some clarity on how the vendor / reseller relationship is viewed. -Should our vendors be classed as subcontractors - when indicating what NCSC Assured services we can provide, if a vendor who we would resell on the DPS is assured are we able to select that option? Many thanks

Please refer to DPS Joint Schedule 1- Definitions for the subcontractor and subcontract definitions. Regarding NCSC Assured services, they must always be delivered by the prime supplier listed on the DPS and cannot be subcontracted. Your organisation can only select NCSC Assured services if you have the required assurance.
Answered
20/02/2026 13:39

153. We are applying to RM3764iii for Data Destruction / Data Sanitisation services only, under the Non-assured NCSC route. The RM3764iii DPS Needs document confirms that Cyber Essentials (basic) is the mandatory minimum requirement, and that Cyber Essentials Plus and other standards are optional buyer-applied filters. The Buyer Needs document further states that suppliers must only select accreditations and standards that they can genuinely provide, and warns against selecting filters in error. We hold Cyber Essentials (basic) only and do not hold any of the standards listed in Question 82. However, the SRS platform requires at least one selection. Please confirm how CCS would like us to proceed?

Duplicate of previous clarification, responded directly
Answered
17/12/2025 11:10

152. We are applying to join the DPS under Non-assured NCSC Services for Data Destruction. We hold Cyber Essentials (basic) certification and meet all other mandatory requirements. However, Question 82 (Standards) is returning an error stating "You must select an answer", yet we do not currently hold any of the listed standards (Cyber Essentials Plus, CREST, ISO 27001, security clearances, etc.). Previous clarifications confirm these are not mandatory to join the DPS. Please advise how we can proceed with our application when Q82 requires a selection but none of the options apply to our organisation.

Responded to clarification directly
Answered
17/12/2025 11:09

151. Hi In relation to DPSQ Q65, bidders are asked to select if their organisation can provide NCSC Assured Services or Non-Assured NCSC Services. Can you confirm if a bidder can apply for the NCSC Assured Services if a partner/vendor/named key-subcontractor can provide the NCSC Assured Services, or does it need to be the prime bidder that is listed as NCSC Assured?

It is the prime supplier/ bidder that must be assured for any NCSC Assured service/ scheme
Answered
06/11/2025 10:00

Welcome to Supplier Registration Service chat.
Please do not send any confidential information.

Please be aware that this chat is using translation software powered by Google Translate which may affect the accuracy of the language and phrases used.

Are you sure you wish to end this chat? Are you sure you wish to disconnect this chat? New chat message from Please use the 'End Chat' link to end this chat and close the window. Do you want to reset the chat window position? Reset windows