Clarifications

44. In the Bid Pack document: READ FIRST RM3764iii Cyber Services DPS Needs v1 you say: "You need to send your questions through the DPS Marketplace clarification link (on SRS) or the DPS Mailbox address info@crowncommercial.gov.uk and as detailed in the OJEU Contract Notice. Both options can be used to communicate with us." As far as we can see, there is no DPS Marketplace clarification link on SRS and our attempt to use Live Chat (ref 10302401) did not get a response, so we are hoping that you will be able to route our questions to the appropriate person via this general mailbox. Here are the questions: 1. The online Selection Questionnaire HMG_UNIT_SQ-363-v8 seems to include questions on which CESG cyber certifications we hold, but these questions are not in the pdf version of the SQ in the RM3764iii Cyber Services DPS bid pack and do not appear to be referenced anywhere else in the documentation. Can you clarify please? The pdf version of the SQ does reference NCSC Assured and Non-assured services (Q65-77 in the Registration Questionnaire section) and they are included in Attachment 1 - Cyber Services 3 Filter Matrix v1. However there is no mention of them in the mandatory requirements (RM3764iii Cyber services 3 DPS Buyer Needs v1, section 3). Bramble Hub uses sub-contractor partners to deliver its services, who have NCSC certified specialists (CPP )and products (CAPS). Are we correct in understanding that we can bid for the framework?

43. Please could you provide an ETA / timeframe that clarification questions are responded to? We were hoping to submit our response on the 13th, however are unable to do so without having confirmed and completed documentation to meet Framework requirements.

42. In relation to Clause 10.5.2 - where it states that payment obligations stop immediately on termination save for any accumulated rights. Can you confirm that the Buyer is still liable for payment of work performed up until termination?

41. In relation to Core Term 14.3 - can you confirm that this is only related to engagements where we (the Supplier) would be the only holder of the data such as a managed service.

40. Hi, we have been accepted onto the Cyber Security Services 3 DPS, as an Appointed Supplier. However we are unable to see where we upload service definitions etc. We clicked on the Update Evidence button on our dashboard profile however it advised that no evidence is required. If this is the case please advise if there are any other actions we need to do at this stage, thanks

39. With regards to Joint Schedule 4 (Commercially Sensitive Information) which applies to both a call off/and the framework contract. Could you confirm if suppliers are required to complete the order form template at this stage?

38. There is a Guarantee in Joint schedule 8. Can you clarify that a DPS Guarantee is not required as a condition of the award of the DPS Contract?

37. 1. Can we bid on one lot and subsequently bid/ add to the lots as and when? For example if we bid on Lot 1 now and are live and active, perhaps 2 months later wish to be on Lot 2 and 3 - will this be possible to be added as a supplier at any time during the DPS Agreement? 2. Can you clarify what is the assessment timelines from when a DPS is submitted to award selection? 3. How long does the assessment of the evaluation take from submission to when a supplier can be approved under the DPS and be live?

36. With regards to Joint schedule 3 (Insurance), Clause 7.2 - Except where the Relevant Authority is the claimant party, the Supplier shall give the Relevant Authority notice within twenty (20) Working Days after any insurance claim in excess of 10% of the sum required to be insured pursuant to Paragraph 5.1 relating to or arising out of the provision of the Deliverables or this Contract on any of the Insurances or which, but for the application of the applicable policy excess, would be made on any of the Insurances and (if required by the Relevant Authority) full details of the incident giving rise to the claim. Can you please clarify that this notification is only applicable to third party claims which would have the effect of reducing the level of minimum cover available for any claims under a Contract?

35. Bid pack Attachment 6 Selection Questionaire PDF (inf only) - lists Joint Schedule 5 (Corporate Social Responsibility) RM3764.iii. Where is this document as we cannot locate in the bid packs. Thank you

34. Good afternoon, Clause 14.8 of the DPS Core Terms v1.0 indemnifies CCS and each Buyer against any and all Losses incurred if the Supplier breaches Clause 14 and any Data Protection Legislation. Clause 11.5 states that this would be on an uncapped basis. Can you please confirm this is correct or can the indemnity be made subject to a liability capping formula?

33. Awaiting response to the question on Attachment 1 - Cyber Services 3 Filter Matrix v1 lists the CNI sectors. Row 11 contains "Civil Nuclear Communications". Is this a typographical error and should read "Civil Nuclear" and "Communications" as a separate entry?

32. The 'register' questionnaire ends at 81/83, with page 81 stating "93% through this questionnaire". Please could the DPS review all documents and re-release a definitive bid pack.

31. Within the Selection Questionnaire, the pages seem to skip from page 123 > 136 > 143 (PDF page count is 123, 124 & 125). It then returns to a "normal" count. Please advise, if the document is missing content ASAP.

30. Attachment 6 Selection Questionnaire Page 137 Does the scope of the "similar service" extend beyond Certified Professionals? We note that qualifications from different bodies are already referenced in the Certified Consultancy application.

29. Attachment 6 Selection Questionnaire Page 137 Can the authority confirm that the term "assured" as in assured cyber services should be interpreted as certified as per the NCSC website? (See https://www.ncsc.gov.uk/section/products-services/ncsc-certification)

28. Please could the Framework confirm which bid pack(s) are correct?: There is a disparity between those on the 'contracts finder' site and the DPS site. Contracts finder has individiual folders (7, 7A, 7B and 7C) but none included the Selection Questionnaire. The DPS site has one overall folder, with all folders (7, 7a and 7b) apart from folder 7C. It does include the Selection Quesionnaire (215 pages). Is the DPS one correct and does it supercede the documents & folders on the contracts finder site? Thank you.

27. Hi, In reference to the document "READ FIRST RM3764iii Cyber Services DPS Needs v1.PDF". Paragraph 4.35 states various questions which are NOT required for submission. For Paragraph 4.36, can you please clarify if the questions numbers listed (i.e. Q166 - Q172, Q174, Q176, Q179 - Q185) are Required or NOT-Required for submission? Many thanks

26. General Also, please note that in a number of DPS Order schedules, the language has errors such as 'provided that the operation of this paragraph Error! Reference source not found.' Please could this be corrected?

25. Joint Schedule 6 Key Subcontractors 1.6.2 of this Schedule requires that we flowdown to our subcontractors a right 'under CRTPA for CCS and the Buyer to enforce any provisions under the Key Sub-Contract which confer a benefit upon CCS and the Buyer respectively'. The contract is with the Supplier and it is for the Suppler to manage Subcontractors. Please provide an example of this in practice. We would respectively request that this clause (1.6) is removed in its entirety.