ESCC Crisis Payment Scheme

Bidders must be able to establish partnerships, referral pathways and collaborative working arrangements across statutory services and the voluntary and community sector in time for the contract start date. Bidders must be have at least one of the below: a) certification to ISO/IEC 27001:2013 and/or able to demonstrate that its policies, procedures and information risk management processes are of a standard which is equivalent to that certification; or b) hold a 'Cyber Essentials Plus' certificate; or c) able to demonstrate an equivalent commitment to cyber security, provided that the parties agree that the risks associated with the Provider's processing of the Personal Data are low. Bidders must, where applicable, be certified to the appropriate level of the 'Payment Card Industry Data Security Standard'. Bidders must commit to ensuring that all staff and contractors with access to Personal Data meet the requirements of the 'Baseline Personnel Security Standard'.