| Organisation and scale | Sites, regions, users per site, growth plans and the procurement route. | Remote and hybrid users, devices, identity provider and data residency by region. | Site list, user counts and regions stated in the RFP; supplier confirms coverage per region. |
|---|
| Network architecture | Underlay circuits, WAN topology, hub and cloud on-ramps, application performance targets, QoS and routing. | PoP footprint, cloud on-ramps, traffic steering between SD-WAN and the security edge, private application access. | Reference architecture, PoP list with locations, latency and throughput figures per region. |
|---|
| SASE security | Firewall integration, segmentation and how security is applied at the branch. | ZTNA, SWG, CASB, FWaaS, DLP, threat prevention, identity and device posture, logging and SIEM integration. | Capability statement per function, single-vendor or partner delivered, certifications and independent test results. |
|---|
| Resilience | Access diversity, failover behaviour, availability targets per site tier and disaster recovery. | PoP redundancy, fail-open or fail-closed policy, control plane availability and regional fallback. | Published SLA, availability history and a description of the last significant incident. |
|---|
| Managed service | Service ownership, service desk, change management, monitoring, reporting and co-managed options. | Policy administration, incident response, SOC integration and who owns the security policy day to day. | RACI, escalation path, sample monthly service report and named service management roles. |
|---|
| Implementation | Discovery, pilot sites, migration waves, cutover and rollback, dependencies and training. | Identity integration, agent rollout, legacy VPN and proxy retirement, phased policy migration. | Implementation plan with milestones, pilot acceptance criteria and named delivery team. |
|---|
| Pricing and contract terms | Pricing model per site and per circuit, hardware, licences, contract term, indexation and exit. | Pricing per user and per function, bundles, licence tiers, overage, term and exit provisions. | Itemised pricing schedule, total cost over the proposed contract term (Netify recommends a three-year basis for comparison) and the assumptions behind it. |
|---|
| Supplier evidence | Customer references in comparable sectors, accreditations and financial standing. | Analyst coverage, security certifications, data handling and sub-processor disclosure. | Customer references (Netify recommends at least two, in comparable sectors), certification copies, insurance and the evidence request answered in full. |
|---|