FAQs - BT security standards
There are a lot of Standards listed do I need to comply with all of them?
No, you only need to comply with the Standards called out to from the applicable sections of the "BT Security Requirements" and those explicitly referred to as being related to the scope of work.
I do not think one of the Standards I have been asked to comply with is applicable what should I do?
Speak to the procurement buyer who is handling your contract negotiation and provide justification for the Standard that you have been asked to comply with that you believe should not be applicable. Procurement will liaise with the BT Security team and we will review the Standard against the scope of work that will be undertaken to see if we agree to the Standard not being applicable.
I cannot fully comply with everything within a Standard what should I do?
Speak to the procurement buyer who is handling your contract negotiation and provide details of your non-compliances and information regarding any mitigations you might have that can lower any risks associated with your non-compliance. Procurement will liaise with the BT Security team and we will review the non-compliances against the scope of work that will be undertaken and the level of compliance against other requirements. Non-compliances will be noted in the contract so that both parties are clear on the level of compliance that will be achieved to the standards.
We have our own Standards can't I use these?
We understand that most Suppliers will have their own security regime and that they cannot always accommodate client requirements. However, we will need to know where your own Standards do not meet the requirements within our Standards so we may assess any risks we may need to carry and look into any mitigations that BT can implement to lower any risks identified.
I don't understand the full intent of some of the requirements in a Standard who can I speak to?
Speak to the procurement buyer who is handling your contract negotiation they will speak to BT Security and arrange a call for you to discuss your concerns.