Doorman
Doorman is a network traffic filtering using a novel method of series of caches and state machine (patent pending). Which protection platform delivered either as customer-deployed infrastructure software (iSaaS) or as a fully managed Software as a Service (SaaS), depending on customer requirements.
Features
- Independent enforcement layer protecting service from misconfiguration
- Real-time inspection of non-legitimate traffic
- Blocks plaintext and non-protected traffic to prevent data leakage
- Enforces NCSC-approved cryptographic profiles and cipher suites including PQC
- Detects cryptographic drift in certificates, algorithms, and key sizes
- Blocks deprecated protocols traffic by default
- Detects weak Diffie-Hellman key reuse and entropy failures
- Denies and logs unauthorised access attempts in real-time
- Exports detailed security events to SIEM monitoring platforms
Benefits
- Reduce operational risk from misconfiguration and vendor limitations
- Continuously assure security compliance without manual configuration reviews
- Detect security issues early through real-time protocol monitoring
- Prevent accidental data exposure caused by routing or policy errors
- Simplify compliance with NCSC guidance (IPsec and TLS) best practices
- Improve visibility of security events across the organisation
- Provides robust protection for services even when run known exploits
- Support faster incident investigation with detailed logging and SIEM integration
- Maintain long-term security assurance despite configuration or environment changes
- Proven success in detecting and preventing nation state actors
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
3 6 0 5 0 0 0 1 1 0 7 7 1 6 7
Contact
QUANTUM SECRET LIMITED
<removed>
Telephone: <removed>
Email: <removed>@3d502c88-d74a-4739-8ebc-3b44669ef0c3.com
About your service
- Service categories
-
Systems Infrastructure Software
Security
- Security analytics
Network security
- Trusted network access and protection
- Active application security
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- Yes
- What software services is the service an extension to
- Doorman operates as an independent security enforcement and monitoring layer in front of existing gateways, this can include IKE, TLS, CloufFlare WARP, WireGuard, DNS, QUIC, DHCP, NTP, SSH and diode. It extends the security, visibility, and compliance capabilities of deployed solutions without replacing them.
- Cloud deployment model
-
- Public cloud
- Private cloud
- Community cloud
- Hybrid cloud
- Service constraints
-
Requires an existing service and/or gateway
Operates with IPsec, IKE, SSH, NTP, TLS, WARP, QUIC, WireGuard, protocols only
Does not provide VPN tunnel termination or client connectivity
Deployment requires network placement in front of service or gateways
Some advanced detection features require QS signature monitoring integration
Planned maintenance may require brief service interruption, scheduled in advance
Customer-managed deployments require appropriate network and security expertise
Hardware performance limits depend on deployment platform and traffic volumes - System requirements
-
- Existing gateway or service
- Network capability to place Doorman service inline
- Supported physical, virtual, or cloud deployment environment
- Adequate compute capacity for expected traffic volumes
- Time synchronisation service for accurate logging and correlation
- Connectivity to SIEM platform for event forwarding, optional
- QS signature monitoring integration for advanced detection features
User support
- Email or online ticketing support
- Yes, at extra cost
- Support response times
- Email and online ticketing support is available during agreed support hours at additional cost.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
-
Standard Support
Email and online ticketing support
Support during UK business hours
Best-efforts response and resolution
Suitable for non-critical environments
Enhanced Support
Email and online ticketing support
Extended support hours by agreement
Prioritised response and investigation
Assistance with configuration, deployment, and troubleshooting
Premium Support
Email and online ticketing support
24×7 support availability by agreement
Priority handling of incidents and security issues
Proactive operational and configuration guidance - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
How users start using the service
The service is set up and configured by the supplier
Deployment is delivered as part of the onboarding process
Customers are supported through integration with existing SIEM platforms
Guided assistance is provided to validate telemetry, logging, and alerts
Supplier engineers support troubleshooting during initial deployment
Configuration decisions are reviewed with customer security teams
Ongoing support is available through agreed support arrangements
Documentation is provided covering operation, integration, and support processes - Service documentation
- Yes
- Documentation formats
- End-of-contract data extraction
-
End-of-contract data extraction
Security telemetry and logs are retained within customer-owned systems
Customers extract data directly from their SIEM or log management platform
Where required, data exports can be provided in standard formats
Data extraction is supported during the agreed offboarding period
Supplier assistance is available as part of offboarding support
No proprietary tooling is required to access exported data
Doorman does not require customer data to be stored in a proprietary format or location. - End-of-contract process
-
End-of-contract process
At the end of the contract, the service is withdrawn in a controlled manner.
Supplier engineers coordinate with the customer to disable traffic inspection, remove integrations, and decommission the service according to the agreed exit plan.
Customer access to the service is terminated, and any supplier-hosted components are securely decommissioned.
Telemetry forwarding and integrations are stopped in a controlled way to avoid service disruption. - Documentation accessibility standard
- None or don’t know
- How the documentation is accessible
-
Onboarding and offboarding documentation access
Onboarding and offboarding documentation is provided as a documentation pack
Documentation is supplied electronically to authorised customer contacts
The pack includes deployment, integration, operation, and offboarding procedures
SIEM integration and telemetry configuration guidance is included
Documentation is accessible throughout the service lifecycle
Updated documentation is provided when service changes affect operation
Offboarding documentation describes service removal and telemetry termination
Access is restricted to authorised customer personnel
Using the service
- Web browser interface
- No
- Application to install
- No
- Designed for use on mobile devices
- No
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- No
- Customisation available
- Yes
- Description of customisation
-
What can be customised
Supported services and traffic flows monitored by Doorman
Cryptographic profiles, protocols, and enforcement policies
Management-plane access controls and permitted administration paths
Logging, alerting, and telemetry outputs
Event forwarding destinations and formats (for example, SIEM integration)
Detection sensitivity for protocol and cryptographic anomalies
How users can customise
Through policy definitions, allowing;
Enabled services, protocols, and enforcement rules
Telemetry outputs, event filters, and integrations
Who can customise
Customer
Scaling
- Independence of resources
-
The service is deployed within each customer’s own network or cloud environment and does not operate on shared supplier-hosted infrastructure.
Each customer deployment:
Uses dedicated compute, memory, and network resources
Is isolated from other customer deployments
Is not affected by the demand or usage patterns of other users
For cloud deployments, resource isolation is provided by the customer’s cloud environment and chosen architecture.
For physical deployments, resources are dedicated to the customer’s hardware.
As a result, activity or demand from other customers cannot impact service performance or availability.
Analytics
- Service usage metrics
- Yes
- Metrics types
-
Metrics include:
CPU utilisation
Memory usage
Traffic volumes processed
Dropped and blocked traffic statistics
Protocol and enforcement event counts
Metrics are:
Collected in real time
Available to authorised administrators
Exposed through monitoring outputs and telemetry integrations
Exportable to customer monitoring or SIEM platforms - Reporting types
-
- Real-time dashboards
- Reports on request
- Resource tagging
- No
- FOCUS resource tagging
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- No
- Datacentre security standards
- Supplier-defined controls
- Penetration testing frequency
- Less than once a year
- Penetration testing approach
- In-house
- Protecting data at rest
- Physical access control, complying with another standard
- Data sanitisation process
- No
- Equipment disposal approach
- In-house destruction process
Data importing and exporting
- Data export approach
-
Data export approach
Data is exported as security logs and packet capture (pcap) files
Logs and pcaps are forwarded to customer-managed systems during service operation
Exports use standard, non-proprietary formats
Customers access exported data through their SIEM or analysis tools
Data export does not require supplier-specific software
Supplier assistance with exports is available during onboarding or offboarding - Data export formats
- Other
- Other data export formats
-
- PCAP
- Logs
- Data import formats
- Other
- Other data import formats
- PCAP
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
-
High availability can be achieved by:
Deploying redundant service instances
Using cloud-native high availability and failover mechanisms
Using physical appliance redundancy with EtherChannel or equivalent load balancing
Availability outcomes depend on the deployment architecture selected by the customer and agreed during onboarding.
Service level agreements (SLAs)
Availability SLAs are agreed contractually based on the chosen deployment model
SLAs apply to supplier-managed service components only
Customer-managed infrastructure availability is outside the supplier SLA
Service credits and refunds
If agreed availability levels are not met, service credits are applied
Refunds are calculated in line with the agreed SLA terms
Service credits are applied to future invoices rather than cash refunds
No single-instance deployment includes an availability guarantee. - Approach to resilience
-
Resilience is achieved through:
Deployment of multiple service instances to avoid single points of failure
Support for active-active or load-balanced architectures
Use of customer-provided cloud-native resilience and failover capabilities
Physical appliance redundancy using link aggregation or equivalent mechanisms
The service is designed to fail safely, defaulting to secure traffic handling in the event of failure.
Datacentre resilience
The supplier does not operate datacentres for this service.
Datacentre resilience is provided by the customer’s chosen hosting environment and architecture.
Detailed architectural guidance for resilient deployments is available to customers on request. - Outage reporting
-
The service does not use a public status dashboard or supplier-hosted API, as it operates within the customer’s network.
Outages and service issues are reported through:
Service telemetry and health metrics generated by the service
Security and operational logs forwarded to customer monitoring or SIEM platforms
Alerts configured within customer monitoring or alerting systems
Supplier support engagement when issues are raised by the customer
Telemetry can be used by customers to diagnose availability, performance, and enforcement issues.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Public key authentication (including by TLS client certificate)
- Dedicated link (for example VPN)
- Username or password
- Access restrictions in management interfaces and support channels
- Access is provided via secured (TLS/SSH) connections. These are commonly on management interfaces.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- Public key authentication (including by TLS client certificate)
- Dedicated link (for example VPN)
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Security governance
- Named board-level person responsible for service security
- No
- Security governance certified
- No
- Security governance approach
-
The supplier operates a formal security governance approach aligned to UK public sector expectations.
Security governance includes:
Certification to Cyber Essentials Plus
Secure development and configuration management practices
Controlled access to systems and customer environments
Security controls are reviewed regularly to ensure continued effectiveness and compliance with certification requirements. - Information security policies and processes
-
The supplier aligns its information security practices to the requirements of the NCSC Cyber Essentials and Cyber Essentials Plus scheme.
Security controls and processes are implemented and followed in line with Cyber Essentials technical and procedural requirements. - Software Security Code of Practice
- Yes
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
Tracking service components
Service configuration, code, and deployment artefacts are managed in GitHub
Changes are tracked through version control across their lifecycle
Configuration history and change ownership are recorded through commit history
Releases are tagged and traceable to specific changes
Proposed changes are reviewed before being merged or released
Changes affecting security controls are explicitly assessed for security impact
Reviews consider alignment with Cyber Essentials and NCSC guidance
Changes can be rolled back using version control if issues are identified - Vulnerability management type
- Undisclosed
- Vulnerability management approach
-
Vulnerability management approach
The supplier follows a risk-based vulnerability management approach aligned with Cyber Essentials guidance.
Assessing potential threats
Threats are assessed based on the service architecture and deployment model
As the service runs within customer environments, externally exposed services are not operated by the supplier
Security risks are primarily associated with software components, configurations, and integrations
Changes and potential vulnerabilities are reviewed as part of the development and change process - Protective monitoring type
- Undisclosed
- Protective monitoring approach
-
Protective monitoring approach
The supplier applies protective monitoring appropriate to the online services it consumes.
Identifying potential compromises
Use of built-in security monitoring and alerts provided by the online services.
Review of access activity, authentication events, and configuration changes
Monitoring of repository access and changes to source code - Incident management type
- Undisclosed
- Incident management approach
-
Incident management approach
The supplier follows a structured but proportionate incident management approach.
Pre-defined processes
Common incident scenarios have defined response steps
These include access issues, suspected compromise, and service faults
Response actions focus on containment, investigation, and recovery
Processes are aligned with Cyber Essentials guidance
Incident reporting by users
Users report incidents via email or online ticketing
Incidents are logged and tracked through the support process
Urgent incidents can be escalated through agreed contact routes
Incident reporting to users
Incident updates are provided during investigation
Post-incident summaries are provided where appropriate
Reports include impact, actions taken, and recommended steps - Post-quantum cryptography secure
- Yes
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- No
- Free trial available
- No
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 0%
- Between £500,001 and £1,000,000
- 0%
- Between £1,000,001 and £2,500,000
- 1%
- Between £2,500,001 and £5,000,000
- 3%
- Over £5,000,001
- 5%
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- 1f4ff92e-5a65-4548-a557-2d3eeacba40b
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- 2de30ddd-2cd2-4276-aed2-9a23f06d4458
- Other security certifications
- No
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Ensuring new workers are informed of their right to join a trade union
- Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Activities to cascade good practice on fair working conditions throughout the supply chain
- Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
- How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
- How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
- How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
- Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
- Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
- Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
- Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
- Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
- Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
- Plans for positive actions with community groups.
- Measures for making facilities used in the delivery of the contract available for community groups, education or training
- Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
- Plans to respond flexibly and adapt approaches to community engagement and initiatives
- Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
- Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
-
Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
- Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
- Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
- Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
- Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
- Introducing transparency to pay and reward processes
- Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
- Working conditions which promote an inclusive working environment and promote retention and progression
- Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
- Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of the issues affecting the development of new skills by target cohort
- Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
- Other measures to offer development opportunities for the target cohort(s) in the contract workforce
- Understanding of issues relating to entering the contract workforce
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
- Content of the outreach activity is designed to suit the target cohort
-
Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
- Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
- Actions to invest in the physical and mental health and wellbeing of the contract workforce
-