Local Government Association

The exit plan and conditions should document how a contract will be closed regardless of the reason.

Key ongoing cyber security requirements, arrangements, terms and conditions should contractually require suppliers to continuously monitor their cyber security and cyber resilience arrangements.

Key upfront requirements should contractually require suppliers to produce sufficient plans to reduce the likelihood of a cyber incident, and for cyber resilience to reduce the impact of a cyber incident.

It is important that you ask for, and validate, evidence to ensure that suppliers are compliant with your cyber security requirements.

How you and your council can translate cyber security requirements into concrete contract obligations and establish an agreed process for monitoring and reporting.

Evaluating suppliers’ responses is going to be a cross team effort, however there are some cyber-related specific steps that might be helpful for each tender.

​​​​​​​This section considers the different approaches to evaluating suppliers' responses to questionnaires in order to select the most appropriate suppliers.

​​​​​​​There are different methods that your council can use to assess a supplier's ability to meet your cyber security requirements.