Legal & Compliance
Cloud Security & Compliance
Answers a G-Cloud supplier's questions about security certifications and compliance evidence: which certificates each G-Cloud 15 lot requires (Cyber Essentials Plus and ISO 9001/20000-1/27001 for Lots 1a/1b, Cyber Essentials for 2a, 2b and 3), ISO 27001, SOC 2, CSA STAR, PCI DSS, ISO 28000, DSPT, the Carbon Reduction Plan, the NCSC 14 cloud security principles, post-quantum cryptography, the Software Security Code of Practice, UK GDPR, BPSS, SC and DV clearances, and what evidence a submission needs. Not needed when the request is for a security evidence document or an SDD security section; /arckit-uk-gcloud:security and the sdd-lot commands produce those.
- Publisher / source
- tractorjuice/arc-kit (found on GitHub top repositories)
- Upstream record
- tractorjuice/arc-kit
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
0d0a48212c722eaa6c21b241e194a1e6d14f56f60425963a044772d0c216dae6