CORE TECHNOLOGY SYSTEMS (U.K.) LIMITED

Windows 365 Cloud PC (DaaS) - CoreGov

CoreGov Windows 365 Cloud PC delivers fully managed virtual desktops running secure enterprise Windows 10/11 images, with centralised configuration, application management and lifecycle support. The service also includes management of physical Windows and macOS devices, plus corporate and BYOD smartphones through Intune MDM/MAM for consistent, compliant end‑user computing.

Features

• 24/7 support (available as a cost option)
• Intrusion Detection and Prevention
• Fully managed Windows 10 Laptop or Tablet
• Microsoft Enterprise Mobility Suite Management
• Virtual Personal Desktop
• Microsoft Azure based datacentres (UK South and West)
• Security and configuration managed and provisioned by Core
• 1st, 2nd and 3rd Line support options
• Powered by Microsoft Endpoint Manager
• Modern Deployment and Modern Management

Benefits

• UK support staff BPSS and some SC Cleared
• Real-time alerting for zero day threats
• Rapid Provisioning 2-10 weeks to design and implement service
• Pan Government approved to Official
• Core penetration tested first before hand off to 3rd party
• AutoPilot configuration for COVID safe deployments
• Patch and build management, fully managed by Core
• Competitive SLA driven service

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@core.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

632717921447840

Contact

Paul Saer
+44 (0) 207 626 0516
tenders@core.co.uk

About your service

• Service categories:

  Systems Infrastructure Software

  Endpoint management

  Client endpoint management

  • Unified Endpoint Management
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: The Windows 365 Cloud PC (DaaS) service operates within several constraints buyers should understand. It depends on appropriate Microsoft licensing and requires supported Windows 10/11 hardware or compliant devices for enrolment. As a Microsoft‑hosted cloud service, Windows 365 follows Microsoft’s maintenance and update cycles, which may introduce planned downtime or feature changes outside Core’s control. Cloud PCs require reliable internet connectivity and cannot be used offline. Only supported Windows 365 images and configurations are permissible, and third‑party or unsupported applications fall out-of-scope. Management covers the Windows 365 environment and Intune‑managed devices but excludes unsupported integrations or custom plug‑ins.
• System requirements:
  • Microsoft365 licensing – Requires valid Windows/Entra/Intune/M365 licences
  • SupportedOS versions – Devices must run Windows 10/11 Pro/Enterprise.
  • Reliable internet_connectivity – Stable connection required for Cloud PC access.
  • Azure AD integration – Must authenticate via Entra ID tenant.
  • Intune enrolment capability – Device must support Intune management.
  • Modern hardware baseline – must meet Windows 365 performance requirements.
  • Browser compatibility – Requires modern, supported web browser.
  • Network firewall allowances – Must permit Microsoft Windows 365 endpoints.
  • Image compliance – Only supported Windows 365 images allowed.
  • Partner admin link – Tenant must permit Core_ delegated administration.

User support

• Email or online ticketing support: Yes
• Support response times: Response times are dependent on the nature of the request. For Managed Services tickets, the response times for different request types are listed in the Service Description document.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Our webchat solution is configurable, allowing us to tailor the interface by enabling or disabling features for different clients. This can help simplify navigation for users who need a less cluttered interface. Security roles can be configured to limit or expand access to certain features, which can help create simpler experiences for users who might struggle with complex navigation. Users can submit tickets, access knowledge bases, and use service catalogues without direct staff interaction, which could benefit users who prefer asynchronous communication. Our platform also supports integrations with Teams, Slack, and chat applications, which may allow users to choose communication channels that work best for them.
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: Core run an ITIL aligned Service Desk and incident management approach. All service requests can be made directly to our 24/7 ServiceDesk function. First line or Second Line technical analyst or engineers engage with all service tickets until successfully closed. All customers can also engage with a named Account Manager and Customer Success Manager. Core typically structures Managed Services into modular SKUs, allowing customers to select the level of support they need - for example Service Desk, End User Compute, Microsoft365 Support, Infrastructure Support and Azure Managed Services. All of these SKU's are individually priced and pricing is referenced in the relevant Service Definition document
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: We help users begin using the Windows 365 Cloud PC (DaaS) – CoreGov service through a structured onboarding process that ensures their Cloud PC environment is correctly prepared and ready for use. We start by validating prerequisites and establishing the tenant configuration, including identity, authentication and access controls. This follows Core’s established onboarding methodology, which emphasises careful planning, communication, and fact‑finding to create the foundations for a smooth service launch. During onboarding, we configure the customer’s environment, apply required policies, create the relevant user and device groups, and prepare provisioning profiles that define Cloud PC settings. Where Microsoft 365 components form part of the wider solution, our onboarding approach can also deploy or validate Azure Active Directory, Teams, Exchange Online or OneDrive configurations, helping ensure users can sign in and access the services they need from day one. ; Once onboarding is complete, users receive their Cloud PC assignments and can immediately access their Windows 365 environment securely through any supported device.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: When the contract ends, customers retain full ownership and control of all data stored within their Windows 365 Cloud PCs and associated Microsoft 365 services. Before service closure, users or customer administrators can sign in to their Cloud PCs and manually copy or download any files stored in the Cloud PC to alternative storage locations such as OneDrive, SharePoint, Azure Storage or on‑premises systems. Administrators may also export or migrate data centrally using Microsoft Intune, OneDrive Known‑Folder Move, or other organisational backup or migration tools.; Because all Cloud PC data resides within the customer’s own Microsoft 365 tenant, data extraction is not dependent on Core. Customers can continue to access and retrieve their data until they choose to remove the Windows 365 licences or de‑provision the Cloud PCs. If required, Core can provide guidance during the off‑boarding period, but all data remains accessible and under customer control throughout.
• End-of-contract process: At the end of the contract, customers retain full ownership of all data within their Microsoft 365 tenant, including information stored on Windows 365 Cloud PCs. Because no customer data is held by Core, access continues until the customer removes or reassigns their Windows 365 licences. Core then withdraws all delegated administration permissions (GDAP), returning full administrative control to the customer. Once licences are removed or Cloud PCs are de‑provisioned, the virtual desktops are deleted by the Microsoft platform, so any information the customer wishes to keep must be exported beforehand. Core can offer guidance during this transition if required.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our onboarding and offboarding documentation is provided in standard digital formats (DOCX and PDF). While these formats are widely compatible with common screen‑readers and assistive technologies, the documentation itself is not currently authored to a formal accessibility standard such as WCAG 2.1.; Alternative accessible formats (e.g., ODF, large‑print, Easy Read, HTML, audio) are not currently produced by default but may be made available on request.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are functional differences between mobile and desktop access. Desktop users benefit from the full Remote Desktop client or browser‑based experience, enabling multi‑monitor support and full keyboard/mouse interaction. Mobile users access Cloud PCs through the Remote Desktop mobile app, offering a simplified, touch‑optimised interface suitable for light or occasional use.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Users can customise the Windows 365 Cloud PC (DaaS) – CoreGov service in several ways to match their organisational, security and user‑experience needs. They can select Cloud PC specifications, choose preferred operating system builds, and define language or regional settings through provisioning profiles. Organisations may also customise the user experience by selecting base images, adding required applications, and applying their own security or productivity baselines using Microsoft Intune. Identity and access settings—including Conditional Access, role‑based permissions and self‑service options—can also be tailored to meet governance requirements.; Customisation is performed either through customer administrators using Intune and Entra ID, or by Core under secure, time‑bound delegated access, as described in the Windows 365 service configuration approach. End users can make limited adjustments where enabled, such as initiating Cloud PC self‑service restore. These options allow the platform to be aligned to organisational policies, personas, and operational preferences while maintaining consistent, centrally‑governed control

Scaling

• Independence of resources: Windows 365 Cloud PCs provide each user with their own dedicated virtual desktop, meaning CPU, memory and storage are not shared with others. This guarantees that one user’s activity cannot reduce performance for anyone else. Microsoft’s cloud platform also manages underlying capacity automatically, ensuring consistent resource availability across all Cloud PCs. Core enhances this by monitoring Cloud PC health, compliance and performance within the customer’s tenant using Microsoft 365, Azure and Intune insights. This proactive oversight helps identify and resolve any issues early. Together, these capabilities ensure users experience reliable, predictable performance regardless of wider demand on the service.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide clear service metrics to help customers understand the performance, health and usage of their Windows 365 Cloud PC environment. Reporting includes Cloud PC provisioning activity, device compliance, policy status and usage trends, supported by data from Microsoft 365, Azure and Intune. Customers also receive automated dashboards showing key indicators such as incident volumes, SLA performance and service trends, helping them assess platform stability and identify optimisation opportunities. These metrics ensure customers have ongoing visibility of their Cloud PC estate, security posture and service performance, supported by contextual insight from Core where needed.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: Yes. Within the Windows 365 Cloud PC (DaaS) – CoreGov service, all customer data stored on Cloud PCs is protected at rest using Microsoft’s platform‑level encryption, which applies strong AES‑256 encryption across storage, snapshots and system‑level components. Access to this data is further secured through RBAC and MFA within the customer’s Microsoft 365 tenant, ensuring only authorised users or administrators can interact with stored information. Additional protection is applied through Microsoft Purview information‑protection policies, providing classification, labelling, retention and DLP controls across the Cloud PC environment. ISO 27001‑aligned governance ensures continuous oversight and compliance.
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export their data directly from their Windows 365 Cloud PCs because all data resides within the customer’s own Microsoft 365 tenant. Before Cloud PCs are de‑provisioned, users may sign in and manually copy files to alternative storage locations such as OneDrive, SharePoint, Azure Storage, or on‑premises systems.; Customer administrators can also perform bulk or controlled extraction using Microsoft 365 tools—such as Intune for file collection, OneDrive Known‑Folder Move, or existing organisational backup and migration solutions. Because Core does not hold or store customer data, all export actions remain fully under the customer’s control.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: We protect data between the buyer’s network and our service by relying on Microsoft’s encrypted, secure‑by‑design cloud architecture. All connections to Windows 365 Cloud PCs use TLS‑encrypted channels, meaning data in transit cannot be intercepted. Core does not transport or store customer data outside the customer’s own Microsoft 365 tenant.; We add further protection through strong identity controls such as MFA, Conditional Access and role‑based permissions, ensuring only authorised users can connect. Core’s access is governed by time‑bound, least‑privilege GDAP, with all actions audited in the customer tenant.
• Data protection within supplier network: Other
• Other protection within supplier network: We protect data within our network using a multilayered security model built on Microsoft 365’s enterprise‑grade controls. This includes Conditional Access, MFA and strong authentication to restrict access to trusted users and devices. We apply Microsoft Purview information protection—covering data classification, labelling, encryption and retention—to safeguard sensitive information throughout its lifecycle. Microsoft Defender provides anti‑malware, threat detection, Safe Links and Safe Attachments for continuous protection against malicious activity. Audit logs, Secure Score and vulnerability management ensure ongoing monitoring, compliance and rapid identification of risks, maintaining the confidentiality and integrity of data across our environment.

Availability and resilience

• Guaranteed availability: The Windows 365 Cloud PC (DaaS) – CoreGov service inherits its availability commitment directly from Microsoft’s Windows 365 platform. Microsoft formally guarantees 99.9% availability for Windows 365 Cloud PC user sessions, as defined in the Windows 365 SLA. This guarantee means that Cloud PC connectivity is financially backed by Microsoft, with service uptime measured monthly across the platform. Windows 365’s underlying architecture also provides additional resilience measures—such as automated in‑zone failover and storage redundancy, to maintain continuous access, helping ensure that users can reliably connect to their Cloud PCs with minimal disruption
• Approach to resilience: The Windows 365 Cloud PC (DaaS) – CoreGov service is built on Microsoft’s resilient global cloud platform, delivering a financially backed 99.9% availability SLA for Cloud PC sessions. Each Cloud PC benefits from Microsoft Azure’s fault‑tolerant datacentre architecture, including automated in‑zone failover that moves workloads to healthy hosts if compute issues occur, and storage engineered for 11 nines (99.999999999%) data resilience. Continuous disk replication provides an RPO of ~0, ensuring no meaningful data loss. Combined with redundant power, networking and physical isolation across Azure facilities, this design ensures highly reliable, interruption‑resistant Cloud PC operation
• Outage reporting: Our Windows 365 Cloud PC (DaaS) – CoreGov service reports outages using Microsoft’s built‑in service health and incident‑notification systems. Any issue affecting Windows 365 is published in real time through the Microsoft 365 Service Health Dashboard, where administrators can view active incidents, advisories and recovery progress. If administrators cannot access the portal, Microsoft also updates its public service status page. In addition, outage notifications and updates are shared through Microsoft’s @MSFT365status channel, ensuring timely, transparent communication about service disruptions and their resolution.

Identity and authentication

• User authentication needed: Yes
• User authentication: Other
• Other user authentication: Yes. Users must be authenticated to access the Windows 365 Cloud PC (DaaS) – CoreGov service. All Cloud PC access is controlled through Microsoft Entra ID, requiring users to sign in with their organisational identity. Authentication policies applied by the customer—such as password requirements, Multi‑Factor Authentication (MFA) and Conditional Access—must be satisfied before a Cloud PC session is established. These controls ensure only authorised individuals can access their assigned Cloud PCs and that identity, device and risk‑based rules are consistently enforced. This authentication model aligns with Microsoft’s security best practices and the customer’s wider compliance requirements.
• Access restrictions in management interfaces and support channels: We restrict access to management interfaces and support channels for the Windows 365 Cloud PC (DaaS) – CoreGov service using Microsoft Entra ID role‑based access control, ensuring administrators only receive the minimum permissions required. Conditional Access policies enforce device trust, identity verification and security posture before any management interface can be accessed. Privileged actions require phishing‑resistant MFA and are performed only through secure admin platforms, aligned with Zero Trust and NCSC secure‑administration principles. Support channels are similarly restricted, with authenticated service‑desk workflows and full auditing to ensure only authorised personnel can action changes or view sensitive information.
• Access restriction testing frequency: At least once a year
• Management access authentication: Other
• Description of management access authentication: CoreGov service is controlled exclusively through Microsoft Entra ID. Managers and administrators must authenticate with their Primary Corporate Identity using phishing‑resistant MFA before any management interface can be reached. Privileged roles are never accessed directly; instead, Core uses just‑in‑time privileged identity release, where elevated and Tier‑0 credentials are sealed and only issued temporarily through Aurora‑governed workflows. This ensures managerial and administrative privileged access is time‑bound, fully audited and tied to the individual’s primary identity. Conditional Access policies further enforce device trust, identity assurance and location‑based controls, ensuring all privileged management actions are secure and traceable.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Core operates a fully ISO 27001‑certified Information Security Management System (ISMS), supported by formal policies covering confidentiality, integrity, availability, access control, incident management, risk assessment, business continuity and supplier management. All employees receive mandatory security awareness training, with additional specialist training for staff in sensitive roles. Security responsibilities are defined in job descriptions and contracts, and policy breaches are managed under our disciplinary process.; The ISMS is overseen by a dedicated Information Security Steering Group chaired by the COO and supported by the CISO, IT Manager and senior risk specialists. Policies are reviewed at least annually and continuously improved through internal audits, external ISO 27001 surveillance audits, risk assessments and automated compliance monitoring. Staff are required to report security incidents or weaknesses immediately via documented procedures.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Core operates ITIL‑aligned configuration and change management processes, benchmarked at CMM Level 3–4. Configuration items are tracked throughout their lifecycle using customer CMDBs, Intune, Azure and ITSM tooling, ensuring accurate, continually updated records. All changes follow a formal ITIL process, including risk and security assessment, CAB review, client approval, and full auditability. Security impact is evaluated using Microsoft native tooling (Defender, Secure Score) to ensure no adverse effect on identity, access or service integrity. All changes are documented, traceable, and aligned with customer governance.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Core operates a proactive, ITIL‑aligned vulnerability management process. Threats are continuously assessed using Microsoft Defender, Secure Score, Azure Security Centre, Sentinel SIEM and weekly Nessus scans to identify vulnerabilities and misconfigurations. We deploy critical and security patches within 14 days in line with NCSC guidance, with accelerated deployment for zero‑day threats using automated Endpoint Manager and Azure Update Management workflows. Threat intelligence is sourced from Microsoft’s security ecosystem, Tenable CVE feeds, NCSC advisories and SIEM‑driven correlation, ensuring rapid awareness and remediation of emerging risks.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Core delivers continuous protective monitoring using Microsoft Sentinel SIEM, Defender for Endpoint/Servers, and Azure Defender to identify potential compromises through behavioural analytics, real‑time alerting, threat intelligence and proactive threat hunting. When a potential compromise is detected, alerts are triaged by our security operations processes, with automated containment actions (e.g. isolating devices, disabling accounts) and escalation to our engineers. Incident response follows predefined playbooks and documented communication paths. Core provides rapid response, with 24/7 monitoring and immediate triage, and P1 security incidents responded to within minutes via Sentinel‑driven alerting.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Core operates ITIL‑aligned incident management with predefined processes for common events, including a full Major Incident Management (MIM) workflow covering P1 and P2 incidents. Users report incidents via phone, email, or the self‑service portal, or incidents may be auto‑raised through monitoring. When an incident is logged, it is triaged, prioritised, and assigned, with automated notifications and, for P1s, initiation of a live bridging call and stakeholder communications. Response times follow strict SLAs, including 30‑minute response for P1 incidents. We issue formal incident reports for all major incidents.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau (part of the Amtivo Group)
• ISO/IEC 27001 accreditation date: Thursday 27 February 2025
• What the ISO/IEC 27001 doesn’t cover: Nothing
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Ad9ffc7a-28e4-460b-bccb-fc914b3420df
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 13867168-d605-4ed3-9481-13e21f4ae9bc
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@core.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.