Clarifications

108. Could you please clarify whether these attachments need to be submitted and, if so, indicate the appropriate stage within the SQ process for their submission? •Attachment 1 (Products and Service Matrix) •Attachment 2 (MI Template) •Attachment 3 (Financial Assessment Template) •Attachment 5 (Group of Economic Operators and Artificial Intelligence DPS) •Attachment 4 (Additional Sub-Contractor(s).

105. Is responding to question 144 concerning the support of apprenticeships and skills development within this contract is compulsory? If I answer "No" to supporting apprenticeships, will it affect my application?

104. Is responding to question 162 regarding CESG cyber certifications compulsory?

103. 1.Is responding to question 162 regarding CESG cyber certifications compulsory?

101. I have recently obtained the most recent Bid Pack and am currently engaged in the submission process for the Selection questionnaire. I'm uncertain about whether I am required to submit all the specified attachments, such as Attachment 1 (Products and Service Matrix), Attachment 2 (MI Template), Attachment 3 (Financial Assessment Template), Attachment 5 (Group of Economic Operators and Artificial Intelligence DPS), and Attachment 4 (Additional Sub-Contractor(s)). If the answer is affirmative, could you please guide when these attachments should be submitted as part of the SQ process?

99. Can you please confirm if the management levy for this framework is 1%?

98. Based on the text provided on the DPS Needs document the questions below are not applicable and therefore a response is not required. •Part 1: (Contract Example 1) - Q133 •Part 1: (Contract Example 2) - Q134 •Part 1: (Contract Example 3) - Q135 However, on Q137 you ask: If you cannot provide at least one example customer contract, in no more than 500 words please provide an explanation for this e.g. your organisation is a new start-up or you have provided services in the past but not under a contract. Therefore, are we correct in thinking this question also does not apply and does not need an answer?

97. 1.Please could CCS provide a copy of the Supplier Code of Conduct referred to in the questionnaire part 3? 2.Please could CCS provide active links to those documents or websites referred to in the Buyer Needs document under paragraph 3: Guidelines and standards for the delivery of AI services?

96. Regarding RM6200, could CCS confirm how a Supplier will deliver any projects under this framework with a US sub-contractor if Order Schedule 23 is applied? Would overseas authorised sub-contractors be permitted to work on Secret Matters?

95. Extension Request: Please may we request an extension to the submission deadline of 5 working Days?

94. Can you provide an insight into the type of opportunities which are let through the DPS?

93. What percentage of suppliers have spend via this DPS?

92. What is the range of values of the competitions/procurements via the DPS (smallest to largest)?

91. What is the average size of each procurement?

90. How much spend goes through the DPS annually?

89. If the main bidder has Cyber Essentials and we plan to use a sub-contractor in the EU, do they also need to obtain Cyber Essentials, or can EU firms rely on ISO27001?

88. We are going through the SQ process currently. Can you explain "Part 1 Professional or Trade Registers Details", where it asks "1.2.1. What is the name of the register?" - can you advise on which register this refers to?

87. The bid pack makes reference to the supplier's "Data Protection Officer" in the DPS Joint Schedules (1 and 11); the Appointment Form; and DPSQ (question 78). In the Joint Schedules 11, clause 11 it appears that a DPO only needs to be appointed where required by law. The other references appear to make it mandatory to have a DPO in order to register under the DPS. We do not have a DPO because we are not legally required to have one for the work we currently undertake. We would not apply for any work under the DPS which legally required us to have a DPO. Please could you clarify whether it is a requirement to have a DPO in order to register with the DPS and/or whether it is necessary to enter into a contract with a buyer. If it is not mandatory we assume that we can answer DPSQ question 78 and the appointment form fields with 'N/A'.

86. The 'Buyer Needs' document lists several technical standards which must be complied with in order to register with the DPS. ("comply with the appropriate Standards (or equivalent)") Please could you confirm whether the supplier must hold a certificate for each of these standards in order to register with the DPS. Please could you confirm whether the supplier must hold a certificate for each of these standards in order to enter into a contract with a buyer. The relevant standards are:- BS EN ISO 9001; BS 7858:2012; ISO 10007; BS EN ISO 14001; ISO/IEC 13066-1:2011; and ETSI TS 103 645.

85. How can Suppliers know their specified minimum financial threshold score? Can you provide any website links for accessing this information? Additionally, our UK entity has an annual turnover of £700,000, while our headquarters reports a turnover of £8,229,462.