How to Buy PKI Services Through G-Cloud, DOS and Cyber Security Services 3

For public sector buyers, the question is rarely whether a specialist PKI partner exists, but how to engage one compliantly and without a lengthy, first-principles procurement. The UK government frameworks exist precisely to solve this. They pre-qualify suppliers against defined standards, so that buyers can engage them through established, compliant routes rather than running a full open tender for every requirement.

Unsung is listed on the main frameworks that matter for PKI and cybersecurity work, which gives public sector organisations a straightforward way to find and engage us. This article sets out which framework suits which kind of engagement, and how a buyer can reach us through each.

Why frameworks matter for PKI work

PKI engagements vary widely, from a bounded advisory piece or a health check through to a full design and build or a managed service. The right procurement route depends on the shape of the work. A short, well-defined piece of specialist advice does not warrant the same process as a multi-year delivery programme, and the frameworks are structured to reflect that. Using the appropriate route saves the buyer time, keeps the procurement compliant, and gives both sides a clear commercial footing from the outset.

The three routes most relevant to Unsung's work are the G-Cloud framework, the Digital Outcomes and Specialists framework, and Cyber Security Services 3.

G-Cloud: for defined services you can buy directly

The G-Cloud framework, accessed through the government's Digital Marketplace, is designed for cloud-based and cloud-support services that are defined in advance. It suits engagements where the requirement is clear and the buyer wants to engage a supplier directly, without running a competitive tender.

Unsung is listed on G-Cloud, which means a public sector buyer can find our services on the Digital Marketplace and engage us through the framework's own buying process. This is typically the most direct route for a well-defined PKI engagement. The mechanics of searching, comparing and awarding through the Digital Marketplace are set by the platform and your own organisation's procurement rules, so your procurement team will be able to confirm the exact steps for your organisation. What matters from our side is that we are listed and findable there, so the route is open to you.

Digital Outcomes and Specialists: for outcomes you want delivered

The Digital Outcomes and Specialists framework is built for commissioning outcomes and specialist resource rather than pre-defined services. It suits more substantial or bespoke engagements, such as a PKI design and build, a migration, or the provision of specialist PKI expertise into a wider programme.

Unsung is listed on this framework. Procurement through it is a competitive process, in which buyers publish their requirement and suppliers respond, so it is well suited to engagements where the organisation wants to define an outcome and evaluate proposals against it. A buyer who wishes to invite Unsung to a procurement of this kind can find us through the framework, and we would respond alongside other suppliers on the merits of the requirement.

Cyber Security Services 3: for assured cybersecurity work

Cyber Security Services 3 is the framework for cybersecurity services procured through established government routes. It is well suited to security-focused engagements where assurance and compliance are central, which describes much of the PKI and cryptographic work the public sector requires.

As with the Digital Outcomes and Specialists framework, engaging a supplier through Cyber Security Services 3 is a competitive process. Unsung is listed on it, so buyers looking to commission assured cybersecurity work can find and invite us through this route, and we would participate on the same competitive basis as any other listed supplier.

Which route suits which engagement

In broad terms, the choice follows the nature of the work.

• A defined, self-contained service, such as a PKI health check or a bounded advisory engagement, often fits the direct route offered by G-Cloud.
• A larger outcome or specialist delivery, such as a design and build, a migration, or expertise provided into a programme, tends to fit the Digital Outcomes and Specialists route.
• A security-assured engagement where cybersecurity assurance is the organising principle fits Cyber Security Services 3.

These are guides rather than rules. Your own procurement function will confirm which route best fits your organisation's requirement, budget and governance, and we are content to be engaged through whichever is appropriate.

How to engage Unsung

Because we are listed on each of these frameworks, the practical position for a buyer is simple. If you use G-Cloud, you can find Unsung on the Digital Marketplace and engage us through that route directly. If you wish to invite us to a competitive procurement, we are available through the Digital Outcomes and Specialists framework and Cyber Security Services 3, and buyers can find and invite us through both.

We recognise that the competitive routes are exactly that, competitive, and we would expect to earn the work on the strength of our proposal. Our aim in being listed across these frameworks is straightforward: to make it as easy as possible for public sector organisations to engage genuine PKI specialists through the compliant routes they already use.

How Unsung helps

Unsung is a UK-based, specialist cybersecurity consultancy focused exclusively on Public Key Infrastructure, with a team of more than 20 dedicated PKI experts serving government, defence, financial services, healthcare, transport and critical national infrastructure clients. We work on a strictly vendor-neutral basis, providing advisory, delivery and managed services across the full PKI lifecycle.

If you are a public sector buyer with a PKI or cryptographic requirement and would like to understand the most appropriate way to engage us, contact us and we will point you to the right route. You can also read more about our services and the frameworks we are listed on.

‍