Guidance

Government supplier assurance framework

This framework helps the government to manage supplier risk.

Documents

Statement of Assurance questionnaire (Excel)

Statement of Assurance questionnaire (ODS)

This file is in an OpenDocument format

Sample Template: letter to suppliers (Word)

This file may not be suitable for users of assistive technology. Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publiccorrespondence@cabinetoffice.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Sample Template: letter to suppliers (ODT)

This file is in an OpenDocument format

Details

This supplier assurance framework applies to contracts at the ‘Official’ information security level. It should:

  • enable the early identification of high risk projects
  • provide a framework for the risk management of contracts that is consistent, light touch but effective, understood by both government stakeholders and suppliers and enable information sharing and accountability
  • inform the assurance approach taken to high, medium and low-risk contracts

It can be adapted for use in the wider government community as it allows organisations to interpret and apply it according to their business needs. It is particularly relevant where information is shared through contracts or agreements.

Published 1 November 2013
Last updated 25 February 2015 + show all updates
  1. Updated framework documents in line with Security Policy Framework, ISO27001: 2013 standard and the Cyber Essentials scheme.
  2. First published.