NHS GDPR Compliance Tool · UK public procurement notice

SPD Q.4B.1.1: Bidders are required to provide statement of accounts or extracts relating to their business for the previous 3 years. Where any are risks identified by NSS as part of the due diligence carried out on the above information NSS may require Bidders to provide additional information to demonstrate financial standing. Additional information can include but not be limited to:

• parent company accounts (if applicable)
• deeds of guarantee
• bankers statements and references
• accountants’ references
• management accounts
• financial projections, including cash flow forecasts
• details and evidence of previous contracts, including contract values
• capital availability.

Bidders who cannot provide suitable evidence of a secure financial standing may be excluded from the procurement.

Q.4B.5.1 and Q.4B.5.2: It is a requirement of this contract that bidders hold, or can commit to obtain prior to the commence of any subsequently awarded contract, the types and levels of insurance indicated below:

Employers liability insurance: 5 000 000 GBP;

Public liability insurance: 1 000 000 GBP;

Professional indemnity insurance: 1 000 000 GBP

4C.1.2 Please provide details of three relevant examples of services carried out during the last three years.

4.C.2 Bidders are required to confirm compliance with standards, such as ISO or equivalent, set by technical bodies, especially those responsible for quality control. Please provide examples such as the following:

• Cyber Essentials
• ISO 9001 - Quality Management Systems
• ISO 27001 - Information Security Management
• ISO 27017 - Code of practice for information security controls
• ISO 27018 - Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
• UK Government 14 Cloud Security Principles

Please state the relevance of any such educational and professional qualifications.

4C.6: Bidders will be required to confirm that they and/or the service provider have relevant educational and professional qualifications such as the following: ISO27001 or equivalent ITIL qualifications [Helpdesk, etc] or equivalent other professional qualifications relevant to the Services outlined in the Contract Notice.

And:

4C.6.1: Bidders will be required to confirm that they and/or the service provider's managerial staff have relevant educational and professional qualifications such as the following: ISO27001 or equivalent ITIL qualifications [Helpdesk, etc] or equivalent other professional qualifications relevant to the Services outlined in the Contract Notice.

4C.10: Bidders will be required to confirm whether they intend to …