Review of security measures (security standards forms)

The volume and sensitivity of the data being processed will determine the required security standards you will need to have. GCC utilises nationally and internationally recognised security accreditations.

The relevant forms used to review these standards will be contained within your Invitation To Tender (ITT) pack. We require each supplier to evidence that they meet our baseline standards but we may also ask for one of the following:

• Cyber Essentials
• Cyber Essentials+
• Cyber Essentials+ and ISO27001

You may, if you have the required accreditation, provide us with your certificate. If you do not have the required accreditation you can demonstrate your equivalency by completing the relevant equivalency forms.