Articles from Axistwelve on public sector procurement, security certification, council websites, Drupal and AI.https://www.axistwelve.com/en-gbhttps://www.axistwelve.com/insights/accessibility-statement-public-sector/https://www.axistwelve.com/insights/accessibility-statement-public-sector/What a public sector accessibility statement must contain, how GDS checks it against WCAG 2.2 AA, how often to review it and what to ask your supplier.Mon, 26 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/cyber-assessment-framework-for-public-bodies/https://www.axistwelve.com/insights/cyber-assessment-framework-for-public-bodies/The Cyber Assessment Framework 4.0 sets 41 outcomes. How GovAssure and the council CAF use it, and what evidence to ask your website and hosting supplier for.Mon, 26 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/drupal-10-end-of-life/https://www.axistwelve.com/insights/drupal-10-end-of-life/Drupal 10 end of life is 9 December 2026, when security fixes stop. Which Drupal 11 version to target, what LocalGov sites need and what to ask your supplier.Mon, 26 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/drupal-hosting-for-the-public-sector/https://www.axistwelve.com/insights/drupal-hosting-for-the-public-sector/What a public body should require of Drupal hosting: supported PHP and database versions, security patching, data location, backups and a clean exit.Mon, 26 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/public-sector-site-search-test/https://www.axistwelve.com/insights/public-sector-site-search-test/We scored site search on 832 UK public sector websites. The right page came first in 65% of 3,287 searches. See which terms missed and how to test yours.Mon, 26 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/business-continuity-and-disaster-recovery-for-websites/https://www.axistwelve.com/insights/business-continuity-and-disaster-recovery-for-websites/Set RTO and RPO per service, convert uptime into hours and require a tested restore: business continuity and disaster recovery for public sector sites.Mon, 05 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/what-a-headless-cms-changes-about-website-maintenance/https://www.axistwelve.com/insights/what-a-headless-cms-changes-about-website-maintenance/What a headless CMS is, how it differs from a traditional one, what decoupling changes about support and release, and where responsibility gaps open up.Fri, 02 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/iso-42001-what-an-ai-management-system-certifies/https://www.axistwelve.com/insights/iso-42001-what-an-ai-management-system-certifies/What ISO 42001 certifies, what it deliberately does not, how UK accreditation stands after January 2026, and whether to require it from suppliers yet.Thu, 01 Oct 2026 00:00:00 GMThttps://www.axistwelve.com/insights/what-bot-traffic-costs-you/https://www.axistwelve.com/insights/what-bot-traffic-costs-you/Bots were 53 per cent of web traffic in 2025. What the crawler in your logs is doing, the four ways it costs you money, and the controls that actually stop it.Wed, 02 Sep 2026 00:00:00 GMThttps://www.axistwelve.com/insights/shadow-ai-when-staff-use-tools-you-have-not-approved/https://www.axistwelve.com/insights/shadow-ai-when-staff-use-tools-you-have-not-approved/Shadow AI is a demand signal, not a discipline problem. Why bans push the behaviour out of sight, what Samsung’s leaks show, and what to provide instead.Tue, 01 Sep 2026 00:00:00 GMThttps://www.axistwelve.com/insights/what-to-verify-before-adopting-localgov-drupal/https://www.axistwelve.com/insights/what-to-verify-before-adopting-localgov-drupal/What a council should verify before adopting LocalGov Drupal: code custody, governance, security patching, accessibility duty and the procurement route.Mon, 31 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/supplier-iso-27001-certificate-checks/https://www.axistwelve.com/insights/supplier-iso-27001-certificate-checks/What to check on a supplier’s ISO 27001:2022 certificate: the scope statement, the 2013 transition deadline, and how to verify the record on UKAS CertCheck.Fri, 28 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/how-a-council-buys-through-dos-7-framework/https://www.axistwelve.com/insights/how-a-council-buys-through-dos-7-framework/How a council buys on the DOS 7 framework: further competition only, no direct award, the four lots, and the Contract Award Service process step by step.Thu, 27 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/what-g-cloud-15-changes-for-the-public-sector-buyer/https://www.axistwelve.com/insights/what-g-cloud-15-changes-for-the-public-sector-buyer/G-Cloud 15 was awarded on 6 August 2026. What changes for councils and public bodies buying through the framework, from lot structure to call-off length.Wed, 26 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/cyber-essentials-requirements-certificate/https://www.axistwelve.com/insights/cyber-essentials-requirements-certificate/The Cyber Essentials requirements cover five technical controls. What a certificate proves, how the two tiers differ and what changed in April 2026.Tue, 25 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/list-x-and-list-n-explained/https://www.axistwelve.com/insights/list-x-and-list-n-explained/List X is a UK government site approval, usually sponsored by the Ministry of Defence. List N sits with the Office for Nuclear Regulation. What each covers, and what to ask a supplier.Mon, 24 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/g-cloud-suppliers-or-a-dos-7-competition-which-route-fits/https://www.axistwelve.com/insights/g-cloud-suppliers-or-a-dos-7-competition-which-route-fits/Buying cloud hosting, cloud software or cloud support puts you in the market for G-Cloud suppliers. Buying a team to research, design or build a service puts you on Digital Outcomes and Specialists 7. The thing being bought sets the route, whatever the budget.Fri, 14 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/pci-dss-compliance-in-uk-public-sector-procurement/https://www.axistwelve.com/insights/pci-dss-compliance-in-uk-public-sector-procurement/PCI DSS produces no certificate. A supplier can send you an Attestation of Compliance, and the two details that decide whether it means anything are the date of the assessment and the environment it covers.Thu, 13 Aug 2026 00:00:00 GMThttps://www.axistwelve.com/insights/moving-beyond-monolithic-digital-platforms-in-local-government/https://www.axistwelve.com/insights/moving-beyond-monolithic-digital-platforms-in-local-government/For years, the ambition within local government has been to simplify the digital estate. But that idea is increasingly being challenged...Fri, 24 Apr 2026 00:00:00 GMThttps://www.axistwelve.com/insights/putting-councils-back-in-control-with-collaborative-infrastructure-management/https://www.axistwelve.com/insights/putting-councils-back-in-control-with-collaborative-infrastructure-management/Collaborative infrastructure management is built on a simple principle: councils should take as much control as they can, and no more than they need to.Mon, 20 Apr 2026 00:00:00 GMThttps://www.axistwelve.com/insights/preparing-council-websites-for-one-login-and-identity-services/https://www.axistwelve.com/insights/preparing-council-websites-for-one-login-and-identity-services/One Login aims to replace up to 300 separate government accounts, reached through 44 different sign-in methods, with one secure way to prove identity and sign in to services.Wed, 25 Feb 2026 00:00:00 GMThttps://www.axistwelve.com/insights/why-integrations-fail-when-governance-is-missing/https://www.axistwelve.com/insights/why-integrations-fail-when-governance-is-missing/By connecting systems directly, councils hope to remove friction and improve outcomes without redesigning services end-to-end.Wed, 25 Feb 2026 00:00:00 GMThttps://www.axistwelve.com/insights/how-councils-can-reduce-technical-debt-without-disrupting-services/https://www.axistwelve.com/insights/how-councils-can-reduce-technical-debt-without-disrupting-services/Reducing technical debt requires a pragmatic mindset: one that prioritises incremental improvement and sustainability over high-risk change.Tue, 24 Feb 2026 00:00:00 GMThttps://www.axistwelve.com/insights/the-hidden-cost-of-decentralised-content-publishing-in-uk-councils/https://www.axistwelve.com/insights/the-hidden-cost-of-decentralised-content-publishing-in-uk-councils/Decentralised publishing is introduced to relieve pressure on central teams. But without the right platforms and governance, it does the opposite.Tue, 24 Feb 2026 00:00:00 GMThttps://www.axistwelve.com/insights/what-councils-need-in-place-before-using-ai-for-citizen-services/https://www.axistwelve.com/insights/what-councils-need-in-place-before-using-ai-for-citizen-services/The challenge for councils is not whether AI will be used, but whether the organisation is ready to use it safely.Tue, 24 Feb 2026 00:00:00 GMThttps://www.axistwelve.com/insights/2026-a-pivotal-year-for-local-government-digital/https://www.axistwelve.com/insights/2026-a-pivotal-year-for-local-government-digital/The next 12 months will transform local government digital. Key priorities for council leaders across accessibility, governance, AI and LocalGov Drupal.Mon, 09 Feb 2026 00:00:00 GMThttps://www.axistwelve.com/insights/what-a-future-ready-council-website-platform-actually-looks-like/https://www.axistwelve.com/insights/what-a-future-ready-council-website-platform-actually-looks-like/What makes a future-ready council website platform? A practical look at cloud, security, accessibility, resilience and scale for UK local government.Mon, 09 Feb 2026 00:00:00 GMT