Public-sector suppliers

PRACTICAL GUIDANCE

The starting point

Turn the buyer’s assurance wording into a precise scope and evidence plan. Check the requirement before choosing a standard or timetable, and make sure any certificate or readiness claim describes the service actually being supplied.

Priorities to examine

• A tender requests a named standard, accreditation arrangement, certificate scope or acceptable equivalent.
• Contract delivery depends on reliable subcontractors and traceable performance information.
• Security, environmental or safety obligations need to be connected to the contracted activities.
• The team needs to distinguish existing evidence from planned improvements when making bid statements.

Standards to investigate

Evidence to consider

• The exact procurement documents and clarification responses relevant to assurance.
• The proposed delivery model, legal entities, sites and subcontractors.
• Current certificates with scope, issuer and validity information.
• Performance records and management-system evidence relevant to the contracted service.
• Applicable security, data-handling and incident-reporting arrangements.
• A dated action plan for any gaps, with dependencies on independent assessment made explicit.

Questions for your scope

• Does the requirement apply at bid submission, contract award or a later delivery milestone?
• What does the buyer say about equivalent evidence, scope and accredited certification?
• Does the existing certificate cover the entity and service named in the tender?
• Are there additional scheme requirements, such as Cyber Essentials, that need their own assessment?
• Can every assurance statement in the bid be supported without presenting a planned action as completed?

Related guidance and practical next steps