OF1059 - Data & AI Engineering Resource Provision

Description

Terms and acronyms SFIA (Skills Framework for the Information Age) A global skills and competency framework for digital and IT professionals. Roles in this procurement are aligned to SFIA Levels 3–7, which define responsibility and autonomy. API (Application Programming Interface) A set of rules and protocols that allow different software applications to communicate with each other. APIs enable integration between systems. REST (Representational State Transfer) An architectural style for designing networked applications. REST APIs use HTTP methods for communication and are widely used for web services. OAuth2 An open standard for access delegation, commonly used for secure API authentication and authorisation. JWT (JSON Web Token) A compact, URL-safe means of representing claims securely between two parties, often used for authentication in APIs. Carbon Design System An open-source design system developed by IBM, providing reusable components and guidelines for creating consistent user interfaces. Cloud-native An approach to building and running applications that exploit the advantages of cloud computing delivery models, including scalability and resilience. CI/CD (Continuous Integration / Continuous Deployment) A set of practices for automating the integration and deployment of code changes, improving software delivery speed and quality. Observability The ability to measure and understand the internal state of a system based on the data it produces, such as logs, metrics, and traces. Logging Recording events and messages generated by software systems to support monitoring, troubleshooting, and auditing. Summary of the work: Ofqual requires specialist data and AI engineering resources to develop, optimise, and govern its data platforms and analytical capabilities. This will ensure that Ofqual’s data infrastructure is secure, scalable, and capable of delivering actionable insights while meeting regulatory and organisational objectives. The work addresses the need for flexible, expert capability to manage and leverage Ofqual’s data assets. Existing systems require enhancement to support advanced analytics and machine learning, and new solutions must be implemented to ensure ongoing compliance with data ethics and governance standards. The supplier will provide skilled resources across SFIA Levels 3 to 7 to design, build, and maintain data pipelines, analytical models, and governance frameworks that underpin critical business processes. They will also commit through the course of the contract to providing strategic challenge and support. Adopting modern DataOps and MLOps practices is also a key driver, improving reliability, scalability, efficiency, and resilience across data and machine learning workflows. The work focuses on data engineering and integration, AI and ML development and deployment, responsible AI and data ethics, governance and compliance, and visualisation and insight. By undertaking this work, Ofqual will be better able to harness data and AI technologies to improve operational efficiency, enhance regulatory oversight, and deliver better outcomes for stakeholders. Pricing model: Capped time and materials Confirm if you require a contracted out service or supply of resource: Contracted out service: the off-payroll rules do not apply Organisation the work is for: The Office of Qualifications and Examinations Regulation (Ofqual) Where you want the supplier to work: No specific location (for example they can work remotely) Latest start date: 2026-09-01 Expected contract length: 2-00-00 Expected contract structure: 1 Year initial period 1 Year extension period Estimated contract value (excl VAT): 99999 Budget details: £99,999 is for first year. Why the work is being done: Ofqual requires specialist data and AI engineering resources to develop, optimise, and govern its data platforms and analytical capabilities. This will ensure that Ofqual’s data infrastructure is secure, scalable, and capable of delivering actionable insights while meeting regulatory and organisational objectives. The work addresses the need for flexible, expert capability to manage and leverage Ofqual’s data assets. Existing systems require enhancement to support advanced analytics and machine learning, and new solutions must be implemented to ensure ongoing compliance with data ethics and governance standards. The supplier will provide skilled resources across SFIA Levels 3 to 7 to design, build, and maintain data pipelines, analytical models, and governance frameworks that underpin critical business processes. Adopting modern DataOps and MLOps practices is also a key driver, improving reliability, scalability, efficiency, and resilience across data and machine learning workflows. The work focuses on data engineering and integration, AI and ML development and deployment, responsible AI and data ethics, governance and compliance, and visualisation and insight. By undertaking this work, Ofqual will be better able to harness data and AI technologies to improve operational efficiency, enhance regulatory oversight, and deliver better outcomes for stakeholders. Problem to be solved: Ofqual needs flexible, specialist capability across SFIA Levels 3 to 7 to manage and leverage its growing data assets. Existing systems require enhancement to support advanced analytics and machine learning, and new solutions must be implemented to ensure compliance with data ethics and governance standards. Ofqual also needs to adopt modern DataOps and MLOps practices to improve reliability, scalability, efficiency, and resilience. The problem to be solved is to provide skilled resources who can: • Build and optimise ETL processes and data pipelines using Azure Data Factory and Databricks to deliver reliable and performant data flows. • Design, train, and deploy machine learning models that provide predictive insights to support decision-making. • Embed responsible AI and data ethics to ensure fairness, transparency, and accountability in AI solutions. • Implement automation, monitoring, and CI/CD pipelines for data and ML workflows to improve reliability and scalability. • Establish robust data governance aligned with GDPR and security standards to protect sensitive information and maintain trust. • Deliver clear, actionable insights through dashboards and reports using Power BI and other visualisation tools. Addressing this problem will enable secure, scalable data infrastructure and analytical capabilities that underpin critical business processes and support Ofqual’s regulatory objectives. Who the users are and what they need to do: As an internal business user, I need high‑quality data that is accurate, timely, and easy to access, So that I can carry out regulatory tasks efficiently and make informed decisions. As a compliance officer, I need confidence that all data processing, analytics, and AI development follows governance, security, and ethical standards, So that Ofqual meets statutory obligations and protects sensitive information. As a technical architect (data domain), I need data engineers, analytics engineers, and ML specialists who can build scalable and reliable data platforms, So that I can design solutions that align with Ofqual’s data strategy and support long‑term operational needs. As a product owner, I need data engineering and analytical work to deliver clear value and meet user and regulatory requirements, So that Ofqual’s data and AI products remain compliant, usable, and effective. As a service designer, I need access to consistent insights and dependable data flows, So that services can be improved and new capabilities introduced based on evidence rather than assumptions. As a citizen accessing Ofqual’s public information, I need accurate, transparent, and accessible data-driven insights, So that I can understand qualifications and regulatory activity without confusion. As a regulated awarding organisation, I need secure, reliable, and well‑managed data services from Ofqual, So that I can submit data, manage compliance activities, and meet regulatory requirements without delays or errors. As an internal data professional (such as a data engineer, data analyst, or data scientist), I need modern, well‑maintained data platforms and clear governance frameworks, So that I can build, analyse, and maintain data products efficiently and to the required standards. Preliminary market engagement: Discussions with suppliers at DigiGov Expo 24th - 25th September, ExCeL, London. Discussions covered Ofqual's context as described on our about us page and our approach to strategic partnership, including our skills needs as set out in this tender. About us page link: https://www.gov.uk/government/organisations/ofqual/about Work done so far: N/A Current phase: Live Existing team: Ofqual’s Digital and Data function is a multi-disciplinary capability that supports the design, development, and operation of digital services and data platforms. The team comprises approximately 30-35 roles across product management, software development, data engineering, quality assurance, user-centred design, and infrastructure. The team operates primarily through two multi-disciplinary squads, each combining product, delivery, design, development, and assurance expertise. These squads work in an agile delivery model, enabling iterative improvements to existing services and the development of new functionality. They collaborate closely with business stakeholders to ensure solutions meet regulatory requirements and user needs. Core functions include: Software Development Data Engineering and Management Product and Design Quality Assurance Infrastructure and Support Incumbent supplier: No Linked projects: OF1050 - Software Development https://redirect.contractawardservice.crowncommercial.gov.uk/project/70559/overview Working arrangements: Work can be done remotely. Security clearance: Baseline Personnel Security Standard (BPSS) Special terms and conditions: • Cyber Essentials Plus • ISO27001 Certified • Supply of resources within 2 weeks (10 working days) from request Questions and Clarifications 1. Just to reaffirm, the value of this contract is £99,999 excluding VAT? Yes the value is excluding vat. Last Updated: 24 June 2026, 10:12 2. Q1: Please confirm the exact Stage 1 submission requirements. Specifically, where should suppliers provide responses to the Stage 1 essential and nice-to-have criteria: within Attachment 3, as a separate uploaded document, or directly within the eSourcing portal response fields? Q2: Please provide the expected Year 1 role mix, indicative number of resources and anticipated demand profile across SFIA Levels 3–7, including roles such as Data Engineer, Data Scientist, ML Engineer, Data Architect, Data Governance Specialist, Data Ethicist, Power BI Engineer and MLOps Engineer. Q3: Please confirm the expected delivery model for this requirement. Is Ofqual seeking named specialist resources, a managed service, or an outcome-based delivery arrangement delivered through supplier-provided resources? Q4: Please confirm whether the £99,999 Year 1 budget is intended to cover a single specialist resource, a small blended team, or a flexible call-off arrangement based on demand. Q5: Please share a high-level overview of the current data platform architecture, including key Azure services, integration patterns and any known constraints suppliers should consider. Q6: Please provide details of the primary source systems, indicative data volumes and expected data growth so suppliers can size the data engineering, integration, performance and support approach appropriately. Q7: Please confirm whether all resources must be UK-based for remote delivery, BPSS, security and data access purposes, or whether any element of offshore or nearshore delivery is permitted. Ans 1: Bidders are advised that responses to the 12 Essential and 8 Nice-to-Have Skills and Experience criteria should be submitted as a separate supporting document. This document should be clearly structured into two sections, one covering the Essential criteria and the other covering the Nice-to-Have criteria. Each individual response can be of a maximum word limit of 500 words. Ans 2: This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. Ans 3: This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. Ans 4: This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. Ans 5: A high level is shared in the ITT - This contract is for strategic resourcing so this detail is not required at this stage. Ans 6: This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. Ans 7: All resources must be UK-based for remote delivery. Offshore is not permitted. Last Updated: 24 June 2026, 10:10 3. Good morning, Please may we raise the below mentioned CQs, thanks: Can Ofqual confirm whether the £99,999 first-year budget is a hard cap, and whether the optional extension year is expected to be funded at a similar level? Can Ofqual provide an indicative role mix and expected level of demand for the first 3–6 months across the required SFIA Levels 3–7 capabilities? Will Ofqual issue requests as individual role requirements, outcome-based work packages, or a combination of both? The ITT confirms an overall evaluation weighting of 75% quality and 25% price. Can Ofqual confirm whether the listed quality award criteria are weighted equally within the 75% quality score, or whether different criteria carry different sub-weightings? Can Ofqual confirm whether the supplier appointed under OF1050 is currently delivering work with the Digital and Data function, and how OF1059 is expected to interface with that work? Thank you. £99,999 is a ceiling for year one. This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. Likely a combination of outcome and role based depending on work and discussions with supplier. OF1050 relates to digital capabilities and these are distinct from the capabilities outlined in this ITT. Technical competence • 45 % - Technical competence o 35 % - Essential skills and experience o 5 % - Nice to have skills and experience o 60 % - Technical Cultural fit • 20 % - Cultural fit Social value • 10 % - Social value Price • 25 % - Price this is the breakdown. you can find it in the ITT as well. At this moment we just answer to Essential skills and experience + Nice to have skills and experience. Last Updated: 19 June 2026, 11:15 4. Hello, The Conditions of Participation require Cyber Essentials Plus and ISO27001 certificates to be uploaded. Must Cyber Essentials Plus be held at bid submission stage, or can it be obtained prior to contract commencement provided evidence is supplied before mobilisation? I appreciate your help. Kind Regards, ISO27001 certification and CE+ must be fully awarded and evidenced at the Stage 1 Last Updated: 19 June 2026, 11:13 5. Good afternoon, Can you clarify how the 10-working-day supply timeline operates in practice: 1. When you request resources (e.g. a data engineer at SFIA Level 5, or an ML engineer at SFIA Level 4), does the 10-day timeline commence from the date of request, and must resources commence work within that period? 2. The SoR specifies resource needs across SFIA Levels 3–7, spanning data engineers, ML engineers, data scientists, analytics engineers, data ethicists, and governance specialists. To meet a 10-day supply timeline consistently across this range of disciplines and seniority levels, would you expect suppliers to maintain an available resource pool, or do you anticipate providing advance notice of your resource requirements? 3. If a supplier proposes a suitable resource but that individual becomes unavailable before the start date, what flexibility exists - must we source a replacement within the original 10-day window, or would a brief delay be acceptable in such circumstances? This clarity will help us structure our resourcing model and delivery commitments appropriately. kind regards, 1. Practically we would refine the need in contract management review meetings and once agreed we would expect appropriate recourses to be available within 10 working days. Work may not be required to commence in that period. Details of this requirement will be refined at contract stage. 2. we would not define a supplier business model to meet our requirement though practically good account management would involve maintaining a pipeline of upcoming needs. 3. At suitable resource must be one that is available at the start date otherwise we would deem them unsuitable as they were unable to actually start. Last Updated: 19 June 2026, 11:10 6. Images and Diagrams Good morning, Can you please clarify if we can use images and diagrams in our response? With best wishes Yes you can use them. Work count will apply to images, diagrams, tables etc Last Updated: 19 June 2026, 11:08 7. Good morning There appears to be some contradiction in previous responses. Can you please clarify what suppliers are required to submit by 29/06? Is it: a) Just ISO 27001 & CE+ certificates b) Just responses to the the 12 Essential and 8 Nice-to-Have Skills and Experience criteria c) Both ISO 27001 & CE+ certificates and responses to the the 12 Essential and 8 Nice-to-Have Skills and Experience criteria Thanks! Suppliers have to submit both the certificates and also the 12 + 8 answers. Last Updated: 17 June 2026, 12:47 ISO27001 certification and CE+ must be fully awarded and evidenced at the Stage 1 A message from supplier We have figured this out why people are not able to see the clarification questions and thought would share with wider group as it helps everybody. The way CAS is setup, it takes 6-12 hours to reflect on http://redirect.contractawardservice.crowncommercial.gov.uk/digital-outcomes/ and even though you as buyer would respond instantly for any clarification questions, the suppliers would not be able to see instantly and would need to wait 6-12 hours. Also login is not required to view the clarification questions and tender details - though to get invited and bid they need to be on DOS-7. Hope this information helps everyone. If not then try Event Clarification maybe all questions are there. Please talk to the website for more clarity. Bidders are advised that responses to the 12 Essential and 8 Nice-to-Have Skills and Experience criteria should be submitted as a separate supporting document. This document should be clearly structured into two sections, one covering the Essential criteria and the other covering the Nice-to-Have criteria. Each individual response can be of a maximum word limit of 500 words. Last Updated: 17 June 2026, 12:38 9. The ITT value is for £99000, with duration of one year. Can you tell us if you are expecting this to be a full time or part time role, as that budget covering a full year, suggests this is not a full time role? £99,999 is a ceiling for year one. This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. Last Updated: 17 June 2026, 12:33 10. "Tender document: Responses to Stage 1 assessment criteria" document contains only 1 question, Do you have Cyber Essentials Plus Certificate? Are you ISO27001 Certified? No other questions are there in Stage 1 as per document. Is that correct? Also can you please clarify if ISO27001 is mandatory to participate. We have CE Plus & ISO27001 in progress currently. Can we participate? ISO27001 certification and CE+ must be fully awarded and evidenced at the Stage 1 Last Updated: 17 June 2026, 12:31 11. Hello, I see your answer for ISO27001 that suppliers need to have this before applying and qualifying for Stage-1. Based on our experience if supplier is able to show commitment this is widely accepted as this certification takes around 2 years to complete. May I please request if you can check again on this as attached evidence (of letter of commitment from UKAS) usually suffices. We are already CE+ but because of this mandate it would make us ineligible. ISO27001 certification and CE+ must be fully awarded and evidenced at the Stage 1 Last Updated: 17 June 2026, 12:30 12. Good afternoon, I hope this message finds you well? Apologies if I have missed the answer to this question in the tender documentation. Can I please confirm if you are looking for a single supplier for this procurement? I am assuming so? We are an SME specialising in Cyber/AI security and governance and would like to be involved; however, we would not be able to deliver all other aspects of the requirement beyond security, governance and compliance. If this procurement is for a single supplier, would the authority consider sharing details with any larger supplier that we could form a consortium with? Thanks in advance for your help and support. We are looking for a single supplier for this procurement. We would not consider sharing details with any larger supplier so that smaller suppliers could form a consortium. Last Updated: 17 June 2026, 08:40 13. The condition of participation asks bidders to confirm whether they hold Cyber Essentials Plus and ISO27001 certification, with both certificates requested. Could the Authority please confirm whether ISO27001 certification must be fully awarded and evidenced at the Stage 1 submission deadline, or whether a bidder that is currently in the process of obtaining ISO27001 certification may still be considered compliant if it can provide evidence that certification is underway and commit to providing the certificate before contract award or service commencement? ISO27001 certification must be fully awarded and evidenced at the Stage 1 submission deadline Last Updated: 16 June 2026, 13:40 14. Good afternoon Does Ofqual have an indication of the levels of resource required for this opportunity (for example. based on current demand)? Is there an incumbent supplier of resources into Ofqual, and, if so, who is the supplier? This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. No there is no incumbent supplier. Last Updated: 16 June 2026, 13:38 15. Is this flexible solution to cost a total of £99,900 for 12 months or is this the maximum budget per individual resource that may be required through the solution? £99,999 is a ceiling for year one Last Updated: 16 June 2026, 13:38 16. Hi, We have a couple of clarifications: 1) What FTE would they want from an ML perspective? 2) Can you please confirm the budget? It is £99,999 for the first year? or for the full contract including both years? Many Thanks, £99,999 is a ceiling for year one. This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. Last Updated: 16 June 2026, 13:37 17. The Stage 1 response template, Attachment 3, appears to contain fields for the earliest start date and the condition of participation relating to Cyber Essentials Plus and ISO27001 certification. However, the assessment methodology document also lists 12 Essential Skills and Experience criteria and 8 Nice-to-Have Skills and Experience criteria for Stage 1 shortlisting, each to be scored as part of the Stage 1 assessment. Could the Authority please confirm where bidders should submit responses to these 20 Stage 1 skills and experience criteria? Specifically, should bidders: a. upload a separate document containing responses to the 12 Essential and 8 Nice-to-Have criteria; b. add these responses into Attachment 3, even though the template does not appear to provide fields for them If a separate document is required, please confirm whether bidders should structure it using the same numbering and wording as the assessment methodology document, and whether the 500-word limit applies to each Essential and Nice-to-Have response. Best regards Bidders are advised that responses to the 12 Essential and 8 Nice-to-Have Skills and Experience criteria should be submitted as a separate supporting document. This document should be clearly structured into two sections, one covering the Essential criteria and the other covering the Nice-to-Have criteria. Each individual response can be of a maximum word limit of 500 words. Last Updated: 16 June 2026, 13:36 18. Good afternoon Despite the multiple notifications from yourself, there are no clarification responses visible at the provided link - see below screenshot. Can this please be remedied? Thanks in advance Try event clarification maybe all questions are there. Im not sure why it says that. Please talk to the website for more clarity. Last Updated: 16 June 2026, 13:36 Try event clarification maybe all questions are there. Im not sure why it says that. Please talk to the website for more clarity. Last Updated: 16 June 2026, 13:35 20. Hello, We've had notification of Q&A published today but none are showing.. The document set also contains tracked changes, uncompleted questions sets etc Thanks Try event clarification maybe all questions are there. Im not sure why it says that. Please talk to the website for more clarity. Last Updated: 16 June 2026, 13:35 Try event clarification maybe all questions are there. Im not sure why it says that. Please talk to the website for more clarity. Last Updated: 16 June 2026, 12:24 22. Hi There, We have a screenshot attached stating there are no clarifcation questions. Please can you advise. Thank you I can see 11 questions as Event clarification (yours is 12th question). I have replied all questions as clarification so all suppliers can have access. Please talk to the website that why you cant see them. Last Updated: 16 June 2026, 12:20 23. Good morning, can you please give an indication of the volume of resources and level of engagement (e.g. full time, par time etc) needed in the first year and can you confirm that the allocated budget is £99,999? thanks and regards This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. £99,999 is a ceiling for year one Last Updated: 16 June 2026, 12:05 24. Hi, Can you please confirm how you would like us to respond? I note there is the document "75936_itt_94879_Attachment 3 Responses to Stage 1 assessment criteria" to answer the specific question around certifications. However, for the 20 Stage 1 and Essential and Nice-to-have questions, should we create response boxes in the document "75936-ocds-pfhb7i-75345-OF1059-DataAlEngineeringResourceITT" or should we create our own separate response document and submit that? Presently, it is not clear. Also, if you would like us to use the document, "75936-ocds-pfhb7i-75345-OF1059-DataAlEngineeringResourceITT", please be aware there are comments and track changes showing where they haven't been accepted so it is not a "clean" document. Many thanks Sorry about the comments. Please remove the comments which are on the file as I cant attached a new file and yes please create your own answer sheet to answer all the Essential and Nice to have skills questions. First stage will shortlist a max of top 5 suppliers. Last Updated: 16 June 2026, 12:04 25. Dear Sir/ Maam, Could you please confirm if the indicative budget is £100k for 12 months? Kind Regards £99,999 is a ceiling for year one Last Updated: 16 June 2026, 12:02 26. Do you anticipate a resource deployed continuously across the contract, or ad-hoc call-off against specific pieces of work? 2. What total volume of effort do you expect the year-one budget to cover, expressed as person-days or FTE? 3. What is the anticipated number of concurrent resources, and the expected mix across SFIA Levels 3 to 7? Ad-hoc call-off against specific pieces of work. This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days Last Updated: 16 June 2026, 12:01 27. 1. The estimated contract value is stated as £99,999 excl VAT, with the budget detail noting this figure is for the first year. Please confirm whether £99,999 is a ceiling for year one only, and whether the one-year extension period is separately funded. If so, what is the estimated or maximum value for the extension? 2. Is £99,999 a hard cap on total spend across all resources in year one, or an indicative estimate that may flex against actual demand? £99,999 is a ceiling for year one only and the one-year extension period is separately funded Last Updated: 16 June 2026, 12:00 28. Hello, We have a CyberEssentials+ certificate in our legal entities name, the ISO27001 is held at our group level - with our groups name on it. Is this acceptable for participation? We can confirm that this arrangement is acceptable for participation, provided that the ISO/IEC 27001 certification held at group level appropriately covers the legal entity submitting the tender. In particular, the scope of the ISO 27001 certification should clearly include (or extend to) the services, systems, and organisational units relevant to the bidding entity. We may request evidence of scope (e.g. the certificate and statement of applicability or scope statement) to verify this alignment as part of the evaluation process. Last Updated: 16 June 2026, 11:59 29. Good morning Can you please confirm the budget for Year 1 is £99,999? This seems low given the resources required. Kind regards The budget for Year 1 is £99,999 Last Updated: 16 June 2026, 11:58 30. The condition of participation asks whether the bidder holds Cyber Essentials Plus and is ISO 27001 certified, with both certificates required as evidence at submission. Please could the Buyer confirm how this condition will be assessed in the following circumstances: 1. Where a bidder holds a current Cyber Essentials Plus certificate but is not yet ISO 27001 certified, will Cyber Essentials Plus alone, supported by evidence of an equivalent information security management system and controls, be accepted? 2. Alternatively, will the Buyer accept a formal commitment to achieve ISO 27001 certification by the contract start date (01-09-2026), or within a defined period following award, as a condition of contract rather than a condition of participation? We ask because ISO 27001 certification typically takes several months to obtain, which is not achievable within the current tender timeline. Given the Government's policy of supporting SME participation, we would welcome clarity on whether equivalent assurance or a commitment to certify would satisfy this requirement. Thank you. Both certificates are required for bidding and rightly form part of our core cyber and information security expectations - especially where a supplier is likely to be working with potentially sensitive official data. Last Updated: 16 June 2026, 11:56 31. Confirm whether the indicative £99999 ex VAT for year 1 represents a firm ceiling for the call-off. Can Buyer indicate the anticipated number of FTE resources or total resource days, expected to be drawn down against the year-1 budget? Statement of Requirements refers to resources across SFIA Levels 3–7. Can Buyer indicate the expected blend or seniority profile of resources anticipated in year 1 e.g. predominant SFIA levels or a typical squad composition? Is budget intended to cover a continuous resource commitment across the full year or a series of discrete, task-based drawdowns as requirements arise? Will resources be engaged on a near-full-time basis within the two squads or is parttime/flexible allocation across multiple roles anticipated? Conditions of Participation require ISO 27001. Public sector procurements frequently accept demonstrably equivalent standards. Will Buyer accept equivalent certifications (e.g. IASME Cyber Assurance, SOC 2 Type II) or an independently audited ISMS mapped to ISO 27001 controls will be accepted as meeting this requirement? Under the capped time and materials model will Buyer require day rates to be held firm for the full contract term including optional extension year or is rate review permitted at extension? Will Buyer publish a rate card or role-based rate template for Stage 2 pricing or are bidders to propose their own role/SFIA-level rate structure? Will resource expenses e.g. travel for any occasional on-site attendance in Coventry be reimbursable in addition to the capped value or must they be absorbed within day rates? Can Buyer confirm whether the same resources are expected to remain in place for the duration of the contract or whether rotation/replacement of named individuals during the term is acceptable? Requirement references existing Azure Data Factory, Databricks and Power BI environments. Can Buyer indicate the current maturity of the data platform e.g. greenfield build vs. enhancement of established pipeline The value is a firm ceiling for the call-off. This contract is for strategic resourcing so we are not able to indicate the anticipated number of FTE resources or total days. This contract is for strategic resourcing so we are unable to indicate the expected blend or seniority profile of resources anticipated in year one. The budget is not intended to cover a continuous resource commitment across the full year, it is intended to cover a series of discrete, task-based drawdowns as requirements arise. Flexible allocation across multiple roles is anticipated. ISO27001 is the requirement. Yes buyer will publish a rate card or role-based rate template for Stage 2 pricing. Roles are fully remote - no travel is expected. Rotation / replacement of named individuals during the term is acceptable assuming equivalent skillset and capabilities. Platform - enhancement of established pipelines. Last Updated: 16 June 2026, 11:55 32. Hi As an SME we have good capability around Data & Ai and hold Cyber essentials+ - we have equivalent systems and processes in place that align to ISO27001, would this be something you would be open to considering as compliant? or could we undertake ISO27001 should we be successfully awarded the contract? ISO27001 is the requirement Last Updated: 16 June 2026, 11:43 33. Good afternoon Can you please clarify that all that is required for our Stage 1 submission is confirmation and evidence of holding the two required certifications? (CE+ and ISO27001) by 29/06? Thanks ISO27001 and CE+ is the requirement and must be evidenced to progress past stage 1. Last Updated: 16 June 2026, 11:42