Choose a section
Section A / Only when required
Issued form · pages 10–11Work-specific addendum
Request only the additional detail needed for identified work. Reuse the same master agreement and current evidence.
When this applies
Leave the optional pages blank at initial registration unless RCDEN requests an addendum. One addendum can cover several stated orders or activities, and it can reference an existing detailed schedule.
Help with this section
Open a question for help. The numbers match the printed questions and agreement clauses.
A.1(a)Master reference and addendum number / revision
What to enter
Copy the master reference and assign the addendum number and revision. Use the same identifiers throughout this addendum and its continuations.
A.1(b)Supplier legal name and affected orders / period / effective date
What to enter
Identify the supplier legal entity and the orders, period or activity covered. State any expressly proposed later effective date.
A.2Affected work, sites, countries and sub-tiers
What to enter
Describe the actual goods, services or activity and only the sites, countries and sub-tiers relevant to it. A single addendum can cover several identified orders; it need not repeat unchanged company information.
A.3(a)Requirements schedule - entry 1
What to enter
For each topic, state the requirement and exact supplied document, relevant clauses, edition/date and date supplied. Use a referenced continuation if the three rows are insufficient.
Security: record the SAL, information boundary, handling conditions and authorised facility/personnel verification as required. Cyber: record the model and level, RAR, invoked 05-138 issue, SAQ, DCC/control evidence and any accepted plan. Product assurance: record allocated Secure by Design or 05-139 requirements.
Other relevant topics include export classification and permissions, quality/AQAP/acceptance, insurance or financial capacity, Article 28 and transfer terms, and sub-tier/customer consent. Only request topics needed for this scope.
A general statement that all prime terms apply does not replace identification and supply of the actual requirements.
Where to find it / what to do next
- RCDEN and the supplier identify only the requirements for the stated work. Record the document, relevant clauses, edition or date and when it was supplied.
- Use the detailed official sources in the relevant guide section to understand a requirement. The schedule must identify what actually applies; a general guidance link alone does not create a contractual requirement.
Useful external help
Opens in a new tab so you can keep this question open.
- Understand government information markings (opens in a new tab)Cabinet Office
Explains classifications, the SENSITIVE marking and handling instructions. The actual owner and contract determine which requirements apply to your work.
- Check the export-control starting guidance (opens in a new tab)Export Control Joint Unit
Explains controls on military goods, software and technology, with routes to the control lists, licensing guidance and specialist help.
- Understand overseas access and data transfers (opens in a new tab)ICO
Explains when international-transfer rules apply and points to the appropriate safeguards and assessment guidance.
A.3(b)Requirements schedule - entry 2
What to enter
For each topic, state the requirement and exact supplied document, relevant clauses, edition/date and date supplied. Use a referenced continuation if the three rows are insufficient.
Security: record the SAL, information boundary, handling conditions and authorised facility/personnel verification as required. Cyber: record the model and level, RAR, invoked 05-138 issue, SAQ, DCC/control evidence and any accepted plan. Product assurance: record allocated Secure by Design or 05-139 requirements.
Other relevant topics include export classification and permissions, quality/AQAP/acceptance, insurance or financial capacity, Article 28 and transfer terms, and sub-tier/customer consent. Only request topics needed for this scope.
A general statement that all prime terms apply does not replace identification and supply of the actual requirements.
Where to find it / what to do next
- RCDEN and the supplier identify only the requirements for the stated work. Record the document, relevant clauses, edition or date and when it was supplied.
- Use the detailed official sources in the relevant guide section to understand a requirement. The schedule must identify what actually applies; a general guidance link alone does not create a contractual requirement.
Useful external help
Opens in a new tab so you can keep this question open.
- Understand government information markings (opens in a new tab)Cabinet Office
Explains classifications, the SENSITIVE marking and handling instructions. The actual owner and contract determine which requirements apply to your work.
- Check the export-control starting guidance (opens in a new tab)Export Control Joint Unit
Explains controls on military goods, software and technology, with routes to the control lists, licensing guidance and specialist help.
- Understand overseas access and data transfers (opens in a new tab)ICO
Explains when international-transfer rules apply and points to the appropriate safeguards and assessment guidance.
A.3(c)Requirements schedule - entry 3
What to enter
For each topic, state the requirement and exact supplied document, relevant clauses, edition/date and date supplied. Use a referenced continuation if the three rows are insufficient.
Security: record the SAL, information boundary, handling conditions and authorised facility/personnel verification as required. Cyber: record the model and level, RAR, invoked 05-138 issue, SAQ, DCC/control evidence and any accepted plan. Product assurance: record allocated Secure by Design or 05-139 requirements.
Other relevant topics include export classification and permissions, quality/AQAP/acceptance, insurance or financial capacity, Article 28 and transfer terms, and sub-tier/customer consent. Only request topics needed for this scope.
A general statement that all prime terms apply does not replace identification and supply of the actual requirements.
Where to find it / what to do next
- RCDEN and the supplier identify only the requirements for the stated work. Record the document, relevant clauses, edition or date and when it was supplied.
- Use the detailed official sources in the relevant guide section to understand a requirement. The schedule must identify what actually applies; a general guidance link alone does not create a contractual requirement.
Useful external help
Opens in a new tab so you can keep this question open.
- Understand government information markings (opens in a new tab)Cabinet Office
Explains classifications, the SENSITIVE marking and handling instructions. The actual owner and contract determine which requirements apply to your work.
- Check the export-control starting guidance (opens in a new tab)Export Control Joint Unit
Explains controls on military goods, software and technology, with routes to the control lists, licensing guidance and specialist help.
- Understand overseas access and data transfers (opens in a new tab)ICO
Explains when international-transfer rules apply and points to the appropriate safeguards and assessment guidance.
A.4Evidence, permissions and completion deadlines
What to enter
Reference current evidence, licences, security/transfer approvals and required completion dates. Give a controlled location or authorised verification route where documents cannot circulate in the ordinary pack.
Apply the actual deadline. Tender assurance may be needed before an order. An addendum cannot defer a legal obligation or substitute for a licence, SAL or required Article 28 agreement.
A.1(c)Repeated master reference and addendum revision
What to enter
Repeat the master and addendum references on page 11 so the two pages remain identifiable if separated.
A.5(a)Express departures, scope and precedence
What to enter
Record each expressly agreed departure, its limited scope and precedence, or None. Other master terms remain effective. An unauthorised exception cannot override law or a binding customer requirement.
A.5(b)Executed addendum attachment identifiers and total pages
What to enter
Identify the complete addendum attachment and continuation set, including versions and total executed pages. Do not attach uncontrolled copies of client material.
A.6(a)Supplier addendum signatory, signature and date
What to enter
The supplier’s authorised signatory enters name, position, signature and actual signing date. Read the identified requirements before signing.
Signature agrees the identified terms. It does not authorise a restricted activity.
Where to find it / what to do next
- Check the scope, requirements, departures and attachments on both addendum pages, then obtain both parties' authorised signatures.
- RCDEN records the separate activity-release decision in A.7. Signing the addendum alone does not release restricted work or access.
Useful external help
Opens in a new tab so you can keep this question open.
- Read official guidance on electronic signatures (opens in a new tab)Ministry of Justice / Law Commission
Background on electronic execution of documents. Follow the signature requirements in the agreement you are actually signing.
A.6(b)RCDEN addendum signatory, signature and date
What to enter
RCDEN’s authorised signatory completes the corresponding details. The addendum takes effect on the later signature or a later date expressly stated in A.1. Signatures do not themselves authorise a restricted activity.
Signature agrees the identified terms. It does not authorise a restricted activity.
Where to find it / what to do next
- Check the scope, requirements, departures and attachments on both addendum pages, then obtain both parties' authorised signatures.
- RCDEN records the separate activity-release decision in A.7. Signing the addendum alone does not release restricted work or access.
Useful external help
Opens in a new tab so you can keep this question open.
- Read official guidance on electronic signatures (opens in a new tab)Ministry of Justice / Law Commission
Background on electronic execution of documents. Follow the signature requirements in the agreement you are actually signing.
A.7(a)Affected activity release decision
What to enter
RCDEN records whether the defined activity is authorised or remains blocked. Required evidence and permissions must actually be in place.
Required permissions must actually be in place. RCDEN’s release record cannot waive law or a restriction it lacks authority to vary.
A.7(b)Authorised activity, restrictions and approval references
What to enter
Describe the released scope, remaining restrictions and supporting approval references. A condition cannot permit an activity whose prerequisite remains unresolved.
Required permissions must actually be in place. RCDEN’s release record cannot waive law or a restriction it lacks authority to vary.
A.7(c)Release reviewer and decision date
What to enter
RCDEN records the authorised reviewer, role and decision date. Keep the decision with its evidence and master agreement.
Required permissions must actually be in place. RCDEN’s release record cannot waive law or a restriction it lacks authority to vary.
This guide explains form v2.2. It does not amend the issued requirements or approve work, exceptions or information release. Use the external help to find records and understand the rules. For questions about RCDEN's requirements or the proposed work, use the contact in Section 1.2 and quote the question number.