Industry update: DOS7 – Altiatech routes to market

Simon Poole • February 9, 2026

DOS7: what it means for buyers – and how customers procure Altiatech services

DOS7: what it means for buyers – and how customers procure Altiatech services

Digital Outcomes and Specialists 7 (DOS7) is Crown Commercial Service’s framework agreement (RM1043.9) for buying digital, data and technology services. Put simply, DOS7 is a procurement vehicle – it gives public sector organisations a compliant route to procure delivery teams and specialist capability from approved suppliers.


DOS7 is designed for outcome-led work delivered through agile phases (discovery, alpha, beta, live and retirement). It is commonly used when teams need delivery capability (research, service design, engineering, integration, data and governance) rather than simply purchasing software licences.




Altiatech has secured a place on DOS7 and is approved to supply services under:

  • Lot 1 – Digital Outcomes: end-to-end, outcome-based digital projects delivered using agile ways of working (for example, research, design, build, release or iterate a service).
  • Lot 3 – Digital Specialists: individual specialists (for example, developers, product roles, analysts and user-centred design roles) to join and strengthen an existing client-led team for a defined period.

How buyers typically use DOS7



1) Define the outcome, not just the activity. Be clear about the user need and what ‘good’ looks like (deliverables, measures, and decision points).


2) Set constraints early. Security, data access, hosting, integration dependencies, service standards, and approvals affect delivery shape and timelines.


3) Use pre-market engagement to sharpen the requirement. Short conversations up front usually lead to a clearer statement of work and a faster shortlist.


4) Procure through the framework and award a call-off. Buyers run the process in line with CCS guidance, then award a call-off contract to the supplier who best meets the requirement.

How to procure Altiatech through DOS7



  • If you need an outcome delivered end-to-end, reference DOS7 (RM1043.9) Lot 1 – Digital Outcomes.


  • If you need named specialist roles to join your team, reference DOS7 (RM1043.9) Lot 3 – Digital Specialists.


  • Start with a short scoping call so we can confirm the right lot, shape a buyer-friendly statement of work, and outline a delivery plan and governance approach suitable for your programme.

Ready to move from ideas to delivery?


Whether you’re planning a cloud change, security uplift, cost governance initiative or a digital delivery programme, we can help you shape the scope and the right route to market.


Email: innovate@altiatech.com or call 0330 332 5842 (Mon–Fri, 9am–5:30pm).


Main contact page: https://www.altiatech.com/contact

Hand holding a phone displaying the Microsoft Copilot logo with the Microsoft logo blurred in the background.

Copilot in 2026: A practical governance checklist using Microsoft’s Copilot Control System

By Simon Poole • February 18, 2026
A practical governance checklist for Microsoft Copilot in 2026, using the Copilot Control System to manage risk, security, compliance, and oversight.
Route to market diagram: Bank to delivery platform, with steps like product mgmt and customer support.

TS4: what it means for buyers – and how customers procure Altiatech services

By Simon Poole • February 12, 2026
Explains what the Technology Services 4 (TS4) framework means for public sector buyers and how to procure Altiatech services through compliant routes.
Two people shaking hands between cloud data and data analytics dashboards.

Where IT Waste Really Comes From (and how FinOps turns it into a competitive advantage)

By Simon Poole • February 10, 2026
Explores where IT waste really comes from and how FinOps helps organisations regain control of cloud spend, improve efficiency, and turn cost visibility into advantage.

Cyber Resilience Planning: Building Business Continuity into Your IT Infrastructure

January 26, 2026
Cyberattacks, system failures, natural disasters, and human errors will occur—the question isn't if but when. Cyber resilience planning ensures organisations can withstand incidents, maintain critical operations during disruptions, and recover quickly when systems fail. It's not just about preventing attacks; it's about ensuring business continuity regardless of what goes wrong.

The Hidden Risks of Manual User Provisioning (And How Automation Fixes Them)

January 19, 2026
Manual user provisioning - the process of creating accounts and granting access through email requests and IT tickets - seems manageable for small organisations. As organisations grow, this approach creates mounting security risks, operational inefficiencies, and frustrated users waiting days for access they need immediately.

Multi-Cloud Security: Managing Identity and Access Across Azure, AWS, and GCP

January 12, 2026
Multi-cloud strategies deliver flexibility, redundancy, and the ability to select the best platform for each workload. They also create complex security challenges, particularly around identity and access management. Each cloud provider offers different security models, tools, and terminology, making unified security difficult to achieve.

Privileged Access Management: Protecting Your Crown Jewels from Internal and External Threats

January 5, 2026
Privileged accounts—those with administrative rights to critical systems—represent the most attractive target for attackers. A single compromised privileged credential gives attackers complete control over infrastructure, data, and operations. Yet many organisations manage privileged access inadequately, creating unnecessary risk.

Identity Governance Maturity: Assessing Where Your Organisation Stands

December 22, 2025
Identity and access management represents a critical security capability, yet many organisations struggle to assess whether their IAM implementation is truly effective. Identity governance maturity models provide a framework for evaluation, revealing gaps and priorities for improvement.

Zero Trust Security: Moving Beyond Perimeter Defence in Hybrid Work Environments

December 15, 2025
Traditional security models assumed everything inside the corporate network was trustworthy, focusing defensive efforts on the perimeter. This approach fails catastrophically in today's hybrid work environment where employees access resources from homes, coffee shops, and co-working spaces whilst applications reside across multiple clouds.
Microsoft logo on a wood-paneled wall, with colorful squares and company name.

Microsoft 365: Major Licensing Changes Coming in 2026

December 10, 2025
Microsoft is introducing major Microsoft 365 licensing changes in 2026. Learn what’s changing, who is affected and how businesses should prepare.