The document summarizes a presentation about applying for the G-Cloud program. It discusses the G-Cloud program overview, the tender process, assurance and security accreditation. The G-Cloud is a marketplace for cloud computing services. The tender process involves submitting services to the marketplace through an OJEU process. Services then go through an assurance process to check definitions and a security accreditation process to ensure they meet certain security levels depending on the type of data and system impact. The presentation takes questions at the end.
4. G-Cloud
A commodity ‘marketplace’ Infrastructure as a Service (IaaS)
(CloudStore) – aligning Platform as a Service (PaaS)
Government customers with Software as a Service (SaaS)
commodity services Specialist Cloud Services
Commercial vehicles
for purchasing of
G-Cloud Standards – technical,
commercial and
commodity services
is delivering security
Rationalise existing
Governance and provision – data centres,
authority Federated server virtualisation
Service
Management
20 June 2012 4
5. Tender process
Chris Stevens
&
Ren Reynolds
Government Procurement Service
&
Commercial Workstream Lead, G-Cloud
Programme
20 June 2012 5
6. OJEU
• Why a ‘tender process’?
– EU
• Procurement Directive 2004/1
• EU Remedies Directive 2007/66/EC
– UK
• Public Contracts Regulations 2006
• “Fair and open”
• OJEU: Official Journal of the European
Union
20 June 2012 6
7. Legal Agreements
Government
Framework
Procurement Service Supplier
Agreement
“The Authority”
Call-off contract
Guidance
“Contracting Body”
Customer
20 June 2012 7
8. Timing
Date Event
23.5.12 Publication of the OJEU Contract Notice
23.05.12 Release of the ITT to Potential Providers
23.05.12 Clarification period starts
23.05.12 e-Sourcing Portal opens
20.06.12 12:00 Period for clarifications on the Framework Agreement closes (“Framework Agreement Clarifications Deadline”)
27.06.12 15:00 Deadline for the publication of responses to Framework Agreement Clarification questions
27.6.12 15:00 Clarification period closes (“Tender Clarifications Deadline”)
4.7.12 15:00 Deadline for the publication of responses to Tender Clarification questions
11.7.12 15:00 Deadline for submission of Tenders to the Authority
1.7.12 Intention to award notification issued to successful and unsuccessful Potential Providers.
1.8.12 – 13.8.12 10 day standstill (in accordance with Regulation 32)
24.8.12 Expected “Commencement Date” for Framework Agreement(s)
20 June 2012 8
9. Process: Overview
Prepare Get Complete SubmitAssure & Accredit
20 June 2012 9
11. Process: Get
• We have changed the format of the Award Spreadsheet to
make it easier to complete
• You have to complete the spreadsheet whether are you re-
submitting your G-Cloud service or adding new ones
• Full guide will be up on our site (
http://gcloud.civilservice.gov.uk) by the end of the week.
20 June 2012 11
12. Process: Complete &
gpsesourcing.cabinetoffice.gov.u
Submit
k
20 June 2012 12
13. Process: Re-Submitting
• If you are
– Re-Submitting your G-Cloud Gi Services
And
– There are NOT changes to ANY of them….
r e
k he
Clic
20 June 2012 13
15. Process: Submitting New or
Changed Services
• If you are:
– Submitting new Services to G-Cloud
Or
– Changing services that are on Gi, then….
neo
at
Th
20 June 2012 15
17. Assure & Accredit
Emma Gawen
Security Workstream Lead
G-Cloud Programme
20 June 2012 17
18. Which for what?
Quality Assurance
E.g. check the service makes clear and unambiguous statements
about the published criteria.
Security Accreditation
Pan Government Accreditation: accredit once and re-use, re-use, re-
use. Can be bought at orgs own risk without accreditation.
20 June 2012 18
19. Assurance
• Ensure that key aspects of a service are defined clearly so
customers know what they are buying/getting.
• The answers that suppliers give on the CloudStore are
checked against the service definitions submitted for each
service.
• We also check the financial status of G-Cloud suppliers.
• The assurance process does not look at suitability of a service
to be offered at various impact levels – this is carried out
by the Accreditation process, and is entirely
separate.
20 June 2012 19
20. Assurance Process
When you submit a service to the CloudStore:
1. Our assurance team assures a core set of service features from the
CloudStore against your service documentation.
2. If your service passes, its status will be updated on the CloudStore
and you will be notified.
– We may highlight areas requiring attention on your CloudStore entry. If we do,
they will be visible both to you and potential customers on the CloudStore.
3. If your service requires amendments, we will notify you with details.
Prioritisation
We will assure services in the order they were submitted.
20 June 2012 20
21. Security Accreditation
• The key aim of G-Cloud accreditation is to ‘do it once, do it
well, and re-use.’ For this reason it will be carried out by Pan
Government Accreditors.
• Accreditation will take place gradually with prioritisation based
on customer demand for a service.
• Please note –include any details of local accreditation your
service holds in your ITT response.
• For detailed information about G-Cloud accreditation,
please refer to our IA guidance:
G-Cloud-Services-IA-Requirements-and-Guidance
20 June 2012 21
22. Accreditation
IL0
Do not require accreditation. Buyer purchases at their risk.
IL1/2 or BIL11x/22x
Based on good commercial standards, centred around an
ISO27001 certification
IL3 or BIL33x and up
Based on Information Standard 1 + 2. CLAS consultant
recommended (not mandated)
20 June 2012 22