[
 {
  "number": 1,
  "title": "Chapter 1: Governance & Strategy",
  "file": "docs/en/chapters/01-governance-strategy.md",
  "questions": [
   {
    "id": "1.1",
    "title": "How is the Sustainable IT strategy organized and formalized inside the organisation, and in its ecosystem and amongst its stakeholders (including suppliers)?",
    "rationale": "Sustainable IT, in an organisation, cannot be the initiative of a single employee. To be a success, such an initiative must consider “bottom-up” expectations and find “top-down” answers and sponsorship. This is true for any transformation or strategic topic. A clear strategy must be used as a reference to build a concrete and effective action plan, which is possible only if it is formalized.",
    "total": 31.0,
    "criteria": [
     {
      "text": "Link with initiative such as SBTi, reporting like CSRD (& EFRAG evaluations), or voluntary certification like Ecovadis or B.Corp, shall be done.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The United Nations Sustainable Development Goals (SDGs) shall be considered in the digital strategy.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "An Environmental Management System (EMS) shall exist in the bidder organisation. It shall be certified (to ISO14001 or ISO 26000) or at least respect the continuous improvement loop principles. Note: ISO 50001 certification covering only energy consumption (mono-criterion) without considering life cycle impacts is considered to be not sufficient. The type of certification (site or group certification) shall be stated. If the certification is by site, the number of sites certified and the number not certified, shall be transparently communicated.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "An inventory of stakeholders has been made, and they have been involved in the definition of the strategy, key objectives have been defined.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "The CSRD template and associated KPI/OKR shall be covered in the Sustainable IT governance.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "For subcontracting stakeholders, an information about the level on subcontracting (tier level 1, 2, 3…) that is reported shall be communicated.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "An engagement letter for the Sustainable IT shall exist and respond to an existing policy. A Charter (e.g. ISIT) shall be adopted.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "An action plan dedicated to Sustainable IT shall exist and be in line with the environmental and societal policies. It must be communicated to all employees. Specific means or tools shall be used to monitor this action plan. Sustainable IT shall weight in the top objectives of the IT and environmental governance. Financial incentives are setup for main contributors and their managers as well as top management",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Link between sustainability and economic performance should be formalized. An internal carbon (CO2) price is recommended, and its value should be declared.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "The bidder shall have similar initiatives to evaluate the maturity of its ecosystem, stakeholders or suppliers.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The sustainable IT strategy and the associated targets have been shared with the ecosystem.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "1.2",
    "title": "How do you ensure the continuity of the Sustainable IT initiative and the perspectives for people who contribute to it?",
    "rationale": "As for any strategic topic, the continuity of the action plan must be ensured, even if people leading the initiative change position. Moreover, people who work on a strategic topic must benefit from fair recognition and should be encouraged to remain inside the organisation. A rate of turnover of people working on Sustainable IT higher than that of the rest of the organisation should trigger a warning, especially if they leave the organisation.",
    "total": 17.0,
    "criteria": [
     {
      "text": "HR development team surveys show that the careers of people working on Sustainable IT evolve in a way like that of other engineers or executives, and that turnover is not induced by higher a rate of departure from the organisation.",
      "priority": "P1",
      "weight": 9.0
     },
     {
      "text": "Integrity in the approach results in long-term engagements in the roadmap, with priorities that do not change too frequently in order to ensure the coherency and objectivity of the results that are monitored even if the organisation changes. The priorities cover the whole scope of environmental and social impacts: energy, GHG emissions, water consumption, resource depletion, digital inclusion and not only one of them for one year and another for another year.",
      "priority": "P1",
      "weight": 8.0
     }
    ]
   },
   {
    "id": "1.3",
    "title": "How have you structured the operational governance of your Sustainable IT strategy?",
    "rationale": "Once the top management has validated a Sustainable IT initiative, and a strategy has been formalized, even if only as a draft, it must become operational and actively governed.",
    "total": 20.0,
    "criteria": [
     {
      "text": "Sustainable IT shall be considered in the strategy and business model of the bidder, so that capacity for engagement is certain.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "A roadmap, with specific KPI/OKR shall exist. The monitoring frequency shall be defined.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "ESG impacts shall be promoted through a ROII approach (Return On Investment and Impacts). Currently, negative environmental and societal impacts of a product or a service rarely have economic consequences. For example, the price of an IT equipment does not reflect its environmental and societal footprint. The impacts should be considered as an investment to reimburse.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Sustainable IT initiative shall be managed by a transversal team. This team is able to answer to questions coming from employees or stakeholders (generic e-mail address, FAQ, website, for example).",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Sustainable IT shall have specific means including a budget and resources. It is recommended to integrate this team as a part of the Governance Department, or under the CIO.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "The KPI/OKR for Sustainable IT shall be consistent with the EMS policy, its certification, and IT governance: it shall include specific targets, with at least an annual review with top management, and shall be defined at IT department level.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The initiative shall be managed at international level (when relevant).",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "1.4",
    "title": "How do you integrate Sustainable IT in the organisation’s risk management?",
    "rationale": "More and more companies and organisations deploy risk management methodologies, for example for cybersecurity, or for their core business strategy. Environmental and societal standards (ISO 14001 for example) require a link between risk management and the global sustainability strategy. It is both an opportunity to raise the potential impacts of an organisation on its stakeholders, and a way to both inform top management of the risks for the organisation induced by climate change, and to make them aware of its societal responsibility.",
    "total": 16.0,
    "criteria": [
     {
      "text": "The Sustainable IT management team shall ensure a link with the risk management system managed at the bidder’s organisation level.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "Due diligence regulation shall be considered. (see webography at the end of the document)",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "A link with the global organisation footprint evaluation shall be made.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "Data governance shall be considered both in Sustainable IT and in risk management.",
      "priority": "P3",
      "weight": 2.0
     }
    ]
   },
   {
    "id": "1.5",
    "title": "How do you on-board Procurement in your strategy?",
    "rationale": "We know that the main societal and environmental impacts are in the upstream and downstream value chain of IT equipment and infrastructures. Consequently, buying any IT equipment or services is a real opportunity to recognize a supplier’s responsibility and an opportunity to have a real influence on our stakeholders.",
    "total": 16.0,
    "criteria": [
     {
      "text": "IT procurement shall be involved and shall integrate specific requirements for suppliers in Calls for Tender specifications.",
      "priority": "P1",
      "weight": 8.0
     },
     {
      "text": "The evaluation grids of calls for tender shall assign a minimum weight of 10% to Sustainable IT.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "Requirements requested during a call for tender, are included in the contracts and verified throughout its duration.",
      "priority": "P2",
      "weight": 4.0
     }
    ]
   }
  ]
 },
 {
  "number": 2,
  "title": "Chapter 2: Training & competences",
  "file": "docs/en/chapters/02-training-competences.md",
  "questions": [
   {
    "id": "2.1",
    "title": "How do you ensure Sustainable IT competency management for your staff?",
    "rationale": "Sustainable IT is an initiative dealing with two very high levels of complexity:\n• The one relative to environmental and human sciences.\n• The one relative to the architecture and technology of digital communications.\nTherefore, although common sense is useful, it is not sufficient. Real competences must be developed, in conjunction with academics’ knowledge and with a high degree of integrity, to launch a Sustainable IT initiative and be ready for the challenges of deploying it at operational level.",
    "total": 50.0,
    "criteria": [
     {
      "text": "The type of training and certification is consistent with the business of the stakeholder. For example: if we evaluate an organisation that delivers IT equipment the training shall be in the eco-design and Life Cycle Assessment of products rather than services.",
      "priority": "P1",
      "weight": 10.0
     },
     {
      "text": "The types of training are relevant to Sustainable IT and not just to general Sustainability.",
      "priority": "P1",
      "weight": 9.0
     },
     {
      "text": "The difference between awareness (issues are understood), training (solutions are known), competences (solutions are applied) and certification (knowledge is verified) is recognized.",
      "priority": "P2",
      "weight": 5.0
     },
     {
      "text": "Certifications are delivered by independent and qualified organisations, or, for internal certification, the criteria of certification are transparent and communicated.",
      "priority": "P2",
      "weight": 5.0
     },
     {
      "text": "Managers and top managers are also trained in (and not only aware of) general Sustainable IT fundamentals.",
      "priority": "P2",
      "weight": 5.0
     },
     {
      "text": "Number of people aware. Number of people trained. Number of people certified. Number of recognized experts. Inside the global organisation on one hand and for the specific mission (or the specific IT department) on the other hand.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "All newcomers are made aware of Sustainable IT during welcome or on boarding days.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "Competence: proportion of people who declare that they apply the knowledge from training in their everyday work.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "A training plan exists in order to ensure up-skilling.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "Refresh trainings is planned in order to maintain competences.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "A matrix expressing the integration of Sustainable IT competences in IT jobs exists (ISO 14001 requirement).",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "Regular communications are organized: “did you know?”, specific events (e.g. digital clean-up days).",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "Sustainable IT competences are promoted and evaluated for hiring.",
      "priority": "P3",
      "weight": 2.0
     }
    ]
   },
   {
    "id": "2.2",
    "title": "How do you contribute to the Sustainable IT ecosystem regarding competences improvements?",
    "rationale": "The level of complexity of such an initiative justifies working and progressing collectively on this topic. Collation of experiences and forums are efficient ways to up-skill and launch efficient actions. Moreover, IT technologies evolve very fast; the principles established one day do not necessarily persist to the next. Taking a solo route through such a systemic issue is probably not the most successful approach.",
    "total": 50.0,
    "criteria": [
     {
      "text": "The organisation is involved in the Sustainable ICT ecosystem (Institutes, associations, workgroups, think and do tanks) to benefit from and propose the exchange of experience, influence standards and regulations, and create common approaches.",
      "priority": "P1",
      "weight": 20.0
     },
     {
      "text": "A technical, social and regulatory watch is ensured to maintain competences and follow the quick evolutions of the ICT world. Example: AI act.",
      "priority": "P2",
      "weight": 10.0
     },
     {
      "text": "Skills patronage is considered to help associations when free ICT resources are available or if working time can be dedicated.",
      "priority": "P2",
      "weight": 10.0
     },
     {
      "text": "The organisation is involved in student awareness or lectures, or professor ships.",
      "priority": "P3",
      "weight": 5.0
     },
     {
      "text": "The organisation is connected to academics of universities or has internal research or development. E.g. internships, skills patronage.",
      "priority": "P3",
      "weight": 5.0
     }
    ]
   }
  ]
 },
 {
  "number": 3,
  "title": "Chapter 3: Measuring",
  "file": "docs/en/chapters/03-measuring.md",
  "questions": [
   {
    "id": "3.1",
    "title": "How do you harmonize ICT and corporate sustainability reporting?",
    "rationale": "Corporate Sustainability Reporting is now a standard for many organisations, especially large ones. New regulations, such as the CSRD (European Corporate Sustainability Responsibility Directive), will generalize these legal duties. As a part of a global organisation, the ICT department must endorse its own footprint and engage in its own mitigation actions, in compliance with the global strategy.",
    "total": 12.0,
    "criteria": [
     {
      "text": "Reporting of ICT footprint shall be consistent with the reporting of the corporate one at the level of the organisation, respecting regulation (E.g. CSRD for targeted companies – with identified ESRS standards / other standards for public services).",
      "priority": "P1",
      "weight": 8.0
     },
     {
      "text": "The number (or proportion) of environmental and societal criteria that are common to ICT and corporate reporting, are declared.",
      "priority": "P2",
      "weight": 4.0
     }
    ]
   },
   {
    "id": "3.2",
    "title": "How do you assess the global environmental and societal impacts of your products or services?",
    "rationale": "The evaluation of any environmental and societal footprint must reflect the global impacts of the ICT organisation or department, and the diversity of these impacts with their potential transfers in its value chain. Systemic assessment methodologies have been developed to ensure that. They have been applied to digital equipment as well as to digital services.",
    "total": 18.0,
    "criteria": [
     {
      "text": "To cover the ecosystem (stakeholders) it is mandatory to take into account not only direct impacts (energy consumption, accessibility) but also indirect ones (generally the most significant, relative to mining, manufacturing or e-waste). Example of indirect impacts: Scope 3 GHG emissions, toxicities and acidification of biotope due to mining, or toxicities due to recycling of WEEE.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "A systemic methodology has to be adopted: at least carbon balance, multicriteria (simplified) LCA is highly recommended.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "Specificities of digital shall be considered. The answers must recognize the difference between general sustainability (that is wider than the perimeter of this guide) and Sustainable IT.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The different environmental and societal criteria covered shall be communicated. For Digital services (or function units), the following environmental criteria are highly recommended:<br>• Climate change (kg CO₂ equivalent)<br>• Mineral abiotic resources depletion (kg Sb eq)<br>• Fossil abiotic resources depletion<br>• Acidification (mol H+ eq)<br>• Fine particulate emissions (DALY)<br>• Water scarcity or water usage (liters of blue or brown water)<br>• Ionizing radiation (kBq U235 eq) Note: in line with the PEF, 80% of the normalized footprint should be covered. Consequently, the footprint shall be computed on the 16 criteria of the PEF and the selection should be done only for the communication.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Biodiversity indicators should be communicated in line with CSRD. The way in which they are computed shall be transparent, in order to avoid a strategy based only on decarbonization.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Hypothesis & impacts data basis, emission factors and other input data shall be taken into account for the footprint computation and documented.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Tools used to evaluate the footprint shall be communicated.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The scope covered by the footprint evaluation must be specified (E.g. Digital workplace, data centres, cloud, network). At least PCR standards shall be respected.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "Societal dimension: SLCA (Societal Life Cycle Assessment) shall be promoted to consider also societal impacts (Human Rights, forced labor, modern slavery, children labor/education access).",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "3.3",
    "title": "How do you communicate your footprint from IT? And how often?",
    "rationale": "Transparency of public information about its environmental and societal footprint is today a requirement for any organisation. It must be easily understandable even by non-expert people. Moreover, regulation now exists to prevent greenwashing and there have already been prosecutions that resulted in a real degradation of brand image for some companies.",
    "total": 14.0,
    "criteria": [
     {
      "text": "Transparent results shall be officially published and communicated to stakeholders, regarding the IT perimeter.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "Any kind of greenwashing should be penalized in the evaluation, aligned with the European regulation (Green claims). Even if it is not intentional, it reveals a lack of maturity. We encourage to consider the possibility to use negative points on this revealing question.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "Footprint data shall be used in communication to raise awareness.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "For digital services providers, the footprint of the delivered services should be computed and communicated to the client.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Popularization shall be done to make figures comprehensible by anybody, using relevant comparisons.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "Regular operational reviews (quarterly recommended) of footprint evaluation and KPI/OKR must be done, in line with governance criteria.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "3.4",
    "title": "How do you undertake engagement on your footprint?",
    "rationale": "If we consider Sustainability Reporting to be a punctual and frequent measure of the footprint of the organisation, we must remember that a thermometer does not reduce the fever. Therefore, targets and roadmaps to reduce a footprint are necessary to engage the organisation and its IT teams. It provides the purpose for measuring and reporting.",
    "total": 16.0,
    "criteria": [
     {
      "text": "The stakeholder should communicate forecasts and engagements on its future footprint. The means of measurement and methodology should be detailed and transparent.",
      "priority": "P1",
      "weight": 8.0
     },
     {
      "text": "Biodiversity is also considered in the engagement in line with CSRD requirements. The methodology to evaluate the biodiversity impacts, must be detailed and transparent.",
      "priority": "P2",
      "weight": 5.0
     },
     {
      "text": "The engagements must be coherent with the global CSR strategy. For example, with SBTi engagements (Net Zero).",
      "priority": "P3",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "3.5",
    "title": "How do you quantify the results of your sustainable IT action plan? Please provide 3 concrete examples of actions achieved and measured during the past 3 years. Aligned with Paris Agreement and Fit for 55 European Regulation (2030 horizon).",
    "rationale": "Targets and roadmaps must result in concrete action plans that produce concrete and measured results. Thus, communication must not focus only on future targets, but also on the results of the targets set a few years ago. The evaluation of maturity must not be based only on future intentions but on concrete achievements, especially when regulation milestones are fixed by authorities.",
    "total": 15.0,
    "criteria": [
     {
      "text": "The actions should express an order of magnitude or a reduction of 5 to 6% per year in GHG emissions each year.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation shall be able to communicate at least 3 footprint reduction actions, achieved during the past 3 years, that were quantified and that are aligned with a Paris Agreement or SBTi Net Zero.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation does not consider measurement as a target itself, but as a mean to drive action plans and assess their credibility.",
      "priority": "P2",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "3.6",
    "title": "What do you require from hardware manufacturers or providers to assess their environmental and societal engagement and performance?",
    "rationale": "Independent studies have revealed that 70 to 80% of the environmental and societal footprint of the digital industry in the world is due to the manufacture of IT equipment and more specifically the extraction (mining) of raw materials required to produce the metals used in manufacturing. Hardware and infrastructure manufacturers have a clear specific responsibility that requires them to be transparent and to deliver concrete results in mitigating their impacts.",
    "total": 15.0,
    "criteria": [
     {
      "text": "Life Cycle Assessments (LCAs) shall be requested from manufacturers during a selection process for buying or leasing ICT equipment (computers, network hardware, servers, smartphones). An LCA shall respect ISO 14044/14064 standards, especially considering independent critical review.",
      "priority": "P1",
      "weight": 15.0
     }
    ]
   },
   {
    "id": "3.7",
    "title": "How do you link an environmental and societal footprint with economic performance and a prosperity strategy?",
    "rationale": "Prosperity is one of the Three Pillars of Sustainability. On one hand economics topics also have an impact in the societal dimension, and on the other hand environmental issues can impact both the economy and society. Moreover, synergies can exist between sustainable IT and FinOps (Financial Operations), for example by reducing the frequency of renewal of equipment.",
    "total": 10.0,
    "criteria": [
     {
      "text": "In line with strategy criteria, a measure shall be used to evaluate economic performance. Total Cost of Ownership and/or Life Cycle Cost Analysis shall be integrated into the decisions process and governance.",
      "priority": "P2",
      "weight": 10.0
     }
    ]
   }
  ]
 },
 {
  "number": 4,
  "title": "Chapter 4: ICT Equipment end of use / end of life / WEEE & (local) circular economy",
  "file": "docs/en/chapters/04-end-of-life-circular-economy.md",
  "questions": [
   {
    "id": "4.1",
    "title": "How does the supplier comply with regulation on waste and WEEE (Waste Electrical and Electronic Equipment)?",
    "rationale": "70 % of WEEE generated by OECD countries flows into international trafficking. The figures are easy to verify and confirmed by Interpol. This trafficking transgresses the Basel Convention on hazardous substances and wastes, signed by 53 countries. Specific regulations exist, at least in these countries.",
    "total": 38.0,
    "criteria": [
     {
      "text": "The organisation must be able to quantify its annual generation of WEEE.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation knows and respects the regulations: it has a waste register that covers WEEE, kept for 3 years.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "For European countries, the organisation knows and respects the ERP (Extended Responsibility Producer) regulation. It is especially recommended to verify that the producer of the IT equipment is identified in the national register of allowed companies on the market.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation verifies that its subcontractor for WEEE treatment is qualified and certified to do it, and that it complies with national standards (CENELEC in Europe) or eco-labels (E.g. WEEElabex in Europe).",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation knows its regulatory responsibility as a waste generator. For example, in France: any waste generator is responsible for the waste until its final destruction or value extraction (French environment Code), unless it is given back to the ERP.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "The supplier is able to produce regulatory traceability documentation; for example, in France BSD, “bordereau de suivi des déchets”.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "The organisation must recognize the difference between EEE and WEEE (due to waste definition) and the difference between end-of-use and end-of-life.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "Different types are segregated when wastes and WEEE are collected For example, screens are separated from other WEEE.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "For equipment that cannot be reused, the organisation must request the value extracted from its waste. Note: value extraction is broader than recycling; it can include heat recovery from combustion for example.",
      "priority": "P3",
      "weight": 2.0
     }
    ]
   },
   {
    "id": "4.2",
    "title": "How does the supplier go beyond regulation on waste and WEEE?",
    "rationale": "With illegal trafficking of 70% of WEEE, despite the existing regulations, complying with regulation is not sufficient to protect the brand image of an organisation: although they complied with regulation, some large companies have been involved in scandals as a result to the failure of their downstream value chain. Going beyond regulation is an opportunity to develop the circular economy and sovereignty with the concept of “urban mines”.",
    "total": 38.0,
    "criteria": [
     {
      "text": "The organisation is able to ensure the upstream traceability of WEEE inside the organisation: identifying the department responsible for each part of its generation of WEEE globally.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation is able to give the average time of use (ownership or leasing) of its IT equipment: computers, screens, network equipment, servers, etc..",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation asks a manufacturer for the lifespan of the equipment that it manufactures; this lifespan shall incorporate the second lifespan. This parameter is an input for Life Cycle Assessment (see Measure chapter).",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The organisation is aware of traceability issues and involves itself in traceability, for example by having a “Trackdéchets” account in France. https://trackdechets.beta.gouv.fr/",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "For international companies, traceability is ensured for all countries.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "At national level, the traceability is ensured for all sites.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "The organisation is able to state the rate of reuse of its IT equipment after it has left the organisation. At least this information is requested from the manufacturer, the broker, the refurbishing organisation or the associations or organisations that receive equipment as gifts. KPI/OKR = Effective reuse rate.",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "The organisation should request the effective recycling rate of equipment that cannot be reused. For recycling a bill of material is requested: for a quantity of returned equipment, how much plastic is recycled and how much metal is recycled (ideally by specific metal)?",
      "priority": "P3",
      "weight": 2.0
     },
     {
      "text": "The organisation has launched initiatives to collect the WEEE (some types of WEEE) of its staff.",
      "priority": "P3",
      "weight": 3.0
     },
     {
      "text": "The organisation is aware that WEEE is a real opportunity to promote local and circular economy. For example, Disable Friendly Companies (DFC) can carry out the collection of equipment. They are also able to perform tests of operations, repairs, or cleaning of memory",
      "priority": "P3",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "4.3",
    "title": "Which actions does the supplier take to reduce the quantity of WEEE that it generates?",
    "rationale": "The WEEE that has the lowest footprint is the one that is not produced. Hence, the main priority must be to reduce the quantity of WEEE generated by the organisation.",
    "total": 24.0,
    "criteria": [
     {
      "text": "The organisation has launched awareness sessions or media so that its employees know that taking care of equipment and keeping it operational is the main priority for reducing the environmental footprint of IT.",
      "priority": "P1",
      "weight": 12.0
     },
     {
      "text": "The organisation has launched actions to facilitate the repair of IT equipment: for example, a repair café, internal or external technical support, etc.",
      "priority": "P1",
      "weight": 12.0
     }
    ]
   }
  ]
 },
 {
  "number": 5,
  "title": "Chapter 5: Internal infrastructures",
  "file": "docs/en/chapters/05-internal-infrastructures.md",
  "questions": [
   {
    "id": "5.1",
    "title": "How is Sustainable IT integrated into the design and management of data centres, infrastructures and facilities?",
    "rationale": "The Design phase is a critical step that defines a large part of the environmental performance of a Data Centre throughout its life. Even if some optimization can be done during the operational phase, and some refurbishment too, the initial design generally sets the “dimension”, i.e. the order of magnitude of subsequent performance.",
    "total": 34.0,
    "criteria": [
     {
      "text": "The Data Centre owner has taken into account its energy, environmental and societal performance during the call for tender and the design phase, including the location. For example: installation on land that had already been developed, proximity to demand for warm air (offices, swimming pools, etc.), choice of eco-responsible materials.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The Data Centre owner shall indicate if its data centre conforms to environmental buildings standards such as BREAM or LEED.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The Data centre owner knows and complies with the European regulation about reporting: https://ec.europa.eu/info/law/better-regulation/have-yoursay/initiatives/13818-Data-centres-in-Europe-reportingscheme_en",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The Data centre owner must indicate its action plan for compliance with national regulations for performance. Example: “Décret Tertiaire” in France.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The Data Centre owner is able to communicate a PUE and the methodology that was adopted for its computation (ISO standard, for example). The means and granularity of measurement must be communicated, specifying real measures, the source of consumption measured (cooling, electrical losses, lighting, warming of oil for diesel generators, etc.) and estimations when measurements are not available. For example, the EN 50600-4-2 standard defines different level of PUE according to data availability: PUE1, PUE2, PUE3.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "Referring to the ADEME PCR “Methodological standard for the environmental assessment of Datacenter IT hosting services and cloud services”, the communication of other indicators is also requested: WUE, CUE, ERF and REF. These indicators are mandatory to prevent impacts transfer for example from Energy/GHG emissions impacts to water impacts by using evaporative cooling technologies.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The Data Centre owner adopts technical best practices for the management of Data Centre infrastructures management. Ex: European Code of Conduct (EU CoC), in line with the European regulation. Example of technical best practices: cold or hot aisle containment, free cooling or free chilling, heat recovery, immersive cooling, class of electrical transformers A0AK or more performant, chillers with magnetic rollers.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The PUE should be reported quarterly at least, and this reporting and its frequency should be contractual.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Global consumption must be communicated (energy, water, refrigerant gas leakages) at least quarterly to expose drifts.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The Data Center owner shall indicate how many times the data or systems are duplicated under the back-up and security policy.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The conclusions of regulatory energy audits shall be communicated to clients with proof that they are used to build the masterplan and the rationalization of the pool of data centers, should be brought.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "Data centers are designed for a maximum external air temperature. This information must be communicated to anticipate any operational security degradation induced by global warming.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "Its initiative is endorsed by a public commitment, e.g. EU CoC signature.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "Its initiative is also extended to its stakeholders and suppliers.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The PUE is communicated with information that enables the estimation of performance from it: location (or external annual average temperature), Tiering level (for security as defined by the Uptime Institute), the age of the Data Centre, weather correction, the IT load (proportion of real power used for IT including network and servers, compared to the maximum capacity).",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The PUE shall be communicated with a reference curve, PUE as a function of IT load to enable comparison of measured values to the theoretical one.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "This curve shall have been verified at the delivery of the Data Centre, using variable resistances in place of servers in the bays. The measure should be done with external temperature representative for an average annual air temperature.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "For Fire protection systems, low impact technologies are deployed; for example: fogging instead of FM200 gas.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "5.2",
    "title": "How is Sustainable IT integrated into the design and management of the internal network (LAN) infrastructures and facilities?",
    "rationale": "Internal Networks operate 24 hours a day and 365 days a year. Their energy consumption is not negligible, and network equipment becomes obsolete rapidly, it must generally be replaced every 4 to 5 years. Specific actions are possible within the internal teams responsible for LAN activities.",
    "total": 16.0,
    "criteria": [
     {
      "text": "The data centre owner must indicate whether its data centre has an embedded network backbone and whether the energy consumption of that backbone is included in the computation of the PUE or not.",
      "priority": "P2",
      "weight": 8.0
     },
     {
      "text": "The energy consumption of the network (Local Area Network) must be identified and segregated from other sources consumption, with specific means.",
      "priority": "P2",
      "weight": 8.0
     }
    ]
   },
   {
    "id": "5.3",
    "title": "How is sustainable IT integrated into the selection and management of data centres physical assets (servers) in a data centre?",
    "rationale": "Like any IT equipment, physical assets such as servers are responsible for a large part of the environmental footprint of a data centre. Their selection is strategic in limiting their initial global impacts, enabling the efficient use of energy and maximizing their operational lives.",
    "total": 32.0,
    "criteria": [
     {
      "text": "Relevant Eco-labels must be requested in the Calls for Tender for servers. EPEAT, TCO are recommended. 80+ and Energy star that consider only energy performance are not sufficient. It is highly recommended to request a label of type 1 as defined in the ISO14024 standard.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "The DPP (Digital Product Passport) is requested and considered in the selection process. It must conform to the framework of the DPP EU regulation published on 13th June 2024, “Setting of eco-design requirements for sustainable products”.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "ASHRAE standards (A3 minimum, and A4 highly recommended) shall be requested to enable a higher temperature in cold aisle containment, and a wider range of humidity.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "The lifespan of servers must be known and communicated",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "The Data Center owner shall indicate how many times the network systems are duplicated for back-up and security policy.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The energy consumption of servers must be identified and separated from other sources of consumption, with specific means (for example PDU).",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Virtualization of servers shall be deployed, and the virtualization rate shall be monitored.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Unused machines and virtual machines must be identified. Their detection shall trigger a decommissioning process including end users.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The lifespan of servers shall be at least 7 years; 10 years is possible and recommended.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Using refurbished servers shall be promoted.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Urbanization must be done to avoid hot points that will require a reduction in the setting of blown cold air.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The efficiency of the urbanization should be verified regularly specific means such as thermal cameras. Air leakages and hot points must be avoided.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The Configuration Management Databases (CMDB) used to manage the allocation of servers, and the digital services, must cover all servers and link digital services to the hardware used to operate them. It must be up to date.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The Data Center owner and the servers operator shall adopt scalability technologies and train its staff in them to enable the highest optimization of servers’ usage.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "5.4",
    "title": "How is sustainable IT integrated into the selection and management of the physical assets of an internal network (LAN)?",
    "rationale": "Like any IT equipment, network physical assets such as switches and routers are responsible for a large part of the environmental footprint of the LAN. Their selection is strategic in limiting their initial global impacts, enabling energy efficiency in use and maximizing their operational lives.",
    "total": 18.0,
    "criteria": [
     {
      "text": "Relevant Eco-labels must be requested in the Calls for Tender for network equipment: switches, routers, Wi-Fi hotspot, etc. TCO is highly recommended since it is the first eco-label to cover network equipment. 80+ and Energy star which consider only energy performance are useful to promote energy savings, but they are not sufficient. It is highly recommended to request a label of type 1 as defined in the ISO14024 standard.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "The DPP (Digital Product Passport) is requested and considered in the selection process. It must conform to the framework of the DPP EU regulation published on 13th June 2024, “Setting of eco-design requirements for sustainable products”.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "An action plan for increasing the lifespan of network equipment by reducing its speed of obsolescence (by, for example, limiting the bandwidth requested inside the organisation) shall be set up and communicated.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "The lifespan of network equipment (routers, Wi-Fi, switches, etc..) must be known and declared.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Virtualization of network equipment shall be deployed, and the virtualization rate shall be monitored.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The consumption of network equipment should be drastically reduced when bandwidth is low (nights, weekends). And the consumption when operating should be proportional to the bandwidth.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The team responsible for networks (LANs) shall ask a supplier of network equipment to produce a table comparing the energy consumption of the equipment that it provides, to the average consumption of equipment on the market, and its evolution.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   }
  ]
 },
 {
  "number": 6,
  "title": "Chapter 6: External infrastructures",
  "file": "docs/en/chapters/06-external-infrastructures.md",
  "questions": [
   {
    "id": "6.1",
    "title": "How do you assure the environmental reporting requested from your CSP, as a client? What data points are reported? If you are a CSP, how do you provide this reporting?",
    "rationale": "Many digital policies encourage to “move to cloud” for different technical and financial reasons. However, the environmental footprint of many cloud providers, especially hyperscalers, remains very nebulous. As part of the scope 3 of their clients, the reporting coming from cloud providers must be transparent, covering the scope 3 (especially upstream) as well as the scopes 1 and 2. Reported data must help the clients to measure the footprint of the services they use.",
    "total": 10.0,
    "criteria": [
     {
      "text": "Emissions under all scopes (1, 2, 3 of the GHG Protocol) are requested from the cloud providers (or provided by the organisation, if it is a CSP).",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The reporting requested (or provided) must include not only GHG emissions (including fugitive emissions of coolant, for example), but also other environmental impacts:<br>• Water consumption and WUE indicator.<br>• CO₂ equivalent emissions and CUE indicator.<br>• Depletion of mineral abiotic resources.<br>• Primary Energy consumption.<br>• Land use.<br>• And other relevant impacts necessary to evaluate impacts on biodiversity, in line with CSRD: acidification of soils and water, eutrophication, etc.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The evaluation of the environmental footprint of the organisation takes into account all the different types of cloud services that it uses or provides: IaaS, PaaS, SaaS, CaaS, etc.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The CSP is asked to respect the EU Code of Conduct for Data Centres, with proven engagement (signature on the charter).",
      "priority": "P2",
      "weight": 2.0
     }
    ]
   },
   {
    "id": "6.2",
    "title": "How does the CSP provide LCA input data? Which kind of input data?",
    "rationale": "Reported data must help the clients to measure the footprint of the services they use. As seen before, systemic methodologies, such as LCA, must be used in order to get an objective evaluation and prevent pollution transfers (in the different phases of the life cycle and on different environmental impacts). This use is possible only if input data such as lifespan and types of servers, number of duplications of data, technical architectures, are provided. Otherwise, incertitude level is too high, and these methodologies cannot be used to help with decision making.",
    "total": 10.0,
    "criteria": [
     {
      "text": "Input data for a Life Cycle Assessment of any digital service that uses cloud must be requested of the CSP (or provided by the CSP). For example:<br>• How many times the data is duplicated (as a function of the SLA level, if needed).<br>• Average lifetime of servers and other IT equipment.<br>• Inventory of infrastructures used by data centres (chillers, electrical converters, diesel generators, stored fuel, etc.).<br>• Lifetime of the data centres and their infrastructures.<br>• Annual consumptions of energy, water, and coolant are provided.<br>• Performance of the Data Centre (PUE/WUE/CUE).<br>• Inventory of IT equipment used to deliver the cloud services.<br>• Type of servers (CPU/RAM) used in the service.<br>• Is equipment refurbished or not?<br>• The footprint of the servers and other IT equipment must be declared with a specific LCA provided by equipment suppliers.<br>• Quantity of e-Waste/WEEE generated each year.",
      "priority": "P1",
      "weight": 10.0
     }
    ]
   },
   {
    "id": "6.3",
    "title": "What is the CSP’s renewable energy policy? What is the transparency and traceability level of its GHG reporting in respect of its renewable energy purchases?",
    "rationale": "• Renewable energy sourcing can be a lever to reduce its environmental footprint. Different types of contracts exist for this sourcing and their value is not equal considering criteria such as traceability of type of electricity generated (where, what kind of sources) and the synchronization between production and use. If the target of such a sourcing is to decarbonize its electrical mix the result must be computed and justified to prevent any kind of greenwashing.",
    "total": 10.0,
    "criteria": [
     {
      "text": "Proportions of electricity under PPA (Power Purchase Agreement), Guarantees of Origins (GoOs) or Renewable Energy Certificates (REC) are declared: % of PPA, % of GoOs/REC.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The emission factors used to convert electricity consumption into GHG emissions are declared and the computation of emissions is justified. This is easy for electricity procured under PPAs, but generally impossible for electricity covered by GoOs or RECs, except for GoOs associated with identified new renewable energy power plant and their precise type (photovoltaic, wind turbine or other) and location. It is not possible to justify an emission factor of zero, when we take an approach LCA in line with ISO 14001.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The CSP is asked to declare the proportion of the electricity that it uses that comes from renewable sources.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "If the CSP cannot clearly justify segregation of consumption under PPAs and GoOs/RECs, market-based reporting must not be used and only location-based reporting may be used.",
      "priority": "P2",
      "weight": 2.0
     }
    ]
   },
   {
    "id": "6.4",
    "title": "How are Sovereignty and Resiliency considered in the cloud hosting policy?",
    "rationale": "• Recent crises have proven how far the economy and the way of living of citizens can be impacted if national and regional sovereignty is not ensured, compromising people resiliency. These two concepts must be pillars of the digitalization strategy, with the objective to reduce its risk exposure and dependency, keeping a vigilant watch on financial expenses.",
    "total": 11.0,
    "criteria": [
     {
      "text": "The selection of the CSP takes into account: sovereignty and resiliency. Cloud agnostic architectures and solutions are deployed. Open Source solutions are highly promoted.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The storage and usage of data on cloud services respect the European GDPR regulations.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The data used and stored on cloud services are stored in identified locations and regions for the data centre, making it possible to identify applicable local regulations. For example: Patriot and Cloud Acts in the USA.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The cybersecurity protection level, the Business Continuity Plan and Disaster Recovery Plan, the financial costs and the environmental impacts of the SLA, are assessed and challenged.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Rebound effects are avoided by challenging the number of users of the services, and justifying the real value for the organisation of the cloud services delivered.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The financial cost of cloud services is charged back to end users. Here we have clear convergence between “FinOps” and “GreenOps”.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The end user is informed about the footprint of the cloud services he uses.",
      "priority": "P2",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "6.5",
    "title": "How is Sustainable IT integrated to the design and management of the CSP’s data centres, infrastructures and facilities?",
    "rationale": "",
    "total": 17.0,
    "criteria": [
     {
      "text": "The CSP has taken into account the energy, environmental and societal performance during the Calls for Tender and the design phase, including the location. For example: installation on land that was already developed, proximity to facilities (offices, swimming pools, etc.) needing low temperature air, selection of eco-responsible materials.",
      "priority": "P1",
      "weight": 1.5
     },
     {
      "text": "The CSP must indicate its action plan for conformance with national regulations in the respect of performance. Example: “Décret Tertiaire” in France.",
      "priority": "P1",
      "weight": 1.5
     },
     {
      "text": "The CSP is able to declare a PUE for each Data Centre used in the cloud services that it delivers to a customer. It declares the methodology that it has adopted for computation (ISO standard for example). The means of measurement and the granularity of measurements, must be declared, differentiating real measurements from estimations, and specifying the nature of consumption covered (cooling, electrical losses, lighting, warming of oil for diesel generators, etc.). For example, the EN 50600-4-2 standard defines different levels of PUE according to data availability: PUE1, PUE2, PUE3.",
      "priority": "P1",
      "weight": 1.5
     },
     {
      "text": "Referring to the ADEME PCR “Methodological standard for the environmental assessment of Datacenter IT hosting services and cloud services”, the declaration of other indicators is also requested: WUE, ERF and REF. These indicators are mandatory to prevent impacts transfer, for example from energy consumption and GHG emissions to water by using evaporative cooling technologies.",
      "priority": "P1",
      "weight": 1.5
     },
     {
      "text": "Global consumption (energy, water, refrigerant gas leakages) must be reported at least quarterly in order to avoid drifts.",
      "priority": "P1",
      "weight": 1.5
     },
     {
      "text": "The Data Center owner shall indicate how many times the data or systems are duplicated for back-up and security policy.",
      "priority": "P1",
      "weight": 1.5
     },
     {
      "text": "The CSP shall indicate whether its data centre conforms to environmental building standards, such as BREAM or LEED.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The CSP knows and respects European regulation about reporting: https://ec.europa.eu/info/law/better-regulation/have-yoursay/initiatives/13818-Data-centres-in-Europe-reportingscheme_en",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The PUE is declared with information that enables the estimation of performance: location (or external annual average temperature), Tiering level (for security, as defined by the Uptime Institute), the age of the Data Centre, the IT load (proportion of real power used for IT including network and servers, compared to the maximum capacity).",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Data centers are designed for a maximum external air temperature. This information must be declared in order to anticipate any degradation of operational security induced by global warming.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The PUE shall be declared with a reference curve - PUE as a function of IT load – in order to enable comparison of measured values to theoretical ones (corrected from external temperature effects).",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "This curve shall have been verified at the delivery of the Data Centre, using variable resistances in place of servers in the bays. The measure should be done with an external temperature representative of an average annual air temperature.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The conclusions of regulatory energy audits shall be declared to clients with proof that they are used to define the masterplan for the rationalization of the pool of data centers.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "The CSP initiative has been endorsed in a public engagement. E.g. signature on EU Code of Conduct (for Data Centre).",
      "priority": "P3",
      "weight": 0.25
     },
     {
      "text": "The CSP initiative is also extended to its stakeholders and suppliers.",
      "priority": "P3",
      "weight": 0.25
     },
     {
      "text": "The PUE should be reported quarterly at least, and this reporting and its frequency should be contractual.",
      "priority": "P3",
      "weight": 0.25
     },
     {
      "text": "For Fire protection systems: low-impact technologies are deployed; for example: fogging instead of FM200 gas.",
      "priority": "P3",
      "weight": 0.25
     }
    ]
   },
   {
    "id": "6.6",
    "title": "How is Sustainable IT integrated into the design and management of the CSP’s internal network (LAN) infrastructures and facilities?",
    "rationale": "",
    "total": 4.0,
    "criteria": [
     {
      "text": "The CSP must indicate whether its data centre embeds a network backbone and whether the energy consumption of this backbone is included in the PUE computation or not.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The energy consumption of the network (Local Area Network) must be identified and segregated from other sources of consumption, with specific means.",
      "priority": "P2",
      "weight": 2.0
     }
    ]
   },
   {
    "id": "6.7",
    "title": "How is sustainable IT integrated to the selection and management of data centres’ physical assets (servers)?",
    "rationale": "",
    "total": 14.0,
    "criteria": [
     {
      "text": "The energy consumption of servers must be identified and differentiated from other sources of consumption, with specific means (for example PDU).",
      "priority": "P1",
      "weight": 1.75
     },
     {
      "text": "Relevant eco-labels must be requested in the Calls for Tender for servers. EPEAT, TCO are recommended. 80+ and Energy star, which consider only energy performance are not sufficient. It is highly recommended to request a label of type 1 as defined in the ISO14024 standard.",
      "priority": "P1",
      "weight": 1.75
     },
     {
      "text": "The DPP (Digital Product Passport) is requested and considered in the selection process. It must be produced in conformance with the framework of the DPP EU regulation published on the 13th of June 2024 “setting of eco-design requirements for sustainable products”.",
      "priority": "P1",
      "weight": 1.75
     },
     {
      "text": "The Configuration Management Databases (CMDB) used to manage the allocation of servers, and the digital services, must cover all servers and link digital services to the hardware used to operate them. It must be up to date.",
      "priority": "P1",
      "weight": 1.75
     },
     {
      "text": "Unused machines and virtual machines must be identified and their detection shall trigger a decommissioning process, involving end users.",
      "priority": "P1",
      "weight": 1.75
     },
     {
      "text": "The lifespan of servers must be known and declared.",
      "priority": "P1",
      "weight": 1.75
     },
     {
      "text": "ASHRAE standards (A3 minimum, and A4 highly recommended) shall be requested in order to enable a higher temperature in cold aisle containment, and a wider range of humidity.",
      "priority": "P2",
      "weight": 0.5
     },
     {
      "text": "Urbanization must be done to avoid hot points that will require a reduction of setting of blown cold air.",
      "priority": "P2",
      "weight": 0.5
     },
     {
      "text": "The efficiency of urbanization should be verified regularly (no cold air leakages, no hot point), with specific means such as thermal cameras.",
      "priority": "P2",
      "weight": 0.5
     },
     {
      "text": "Virtualization of servers shall be deployed, and the virtualization rate shall be monitored.",
      "priority": "P2",
      "weight": 0.5
     },
     {
      "text": "The use of refurbished servers shall be promoted.",
      "priority": "P2",
      "weight": 0.5
     },
     {
      "text": "The CSP shall adopt scalability technologies and train its staff in them in order to enable the highest optimization of server usage.",
      "priority": "P2",
      "weight": 0.5
     },
     {
      "text": "The lifespan of servers shall be at least 7 years and 10 years are possible and recommended.",
      "priority": "P3",
      "weight": 0.25
     },
     {
      "text": "The Data Center owner shall indicate how many times the network systems are duplicated for back-up and security policy.",
      "priority": "P3",
      "weight": 0.25
     }
    ]
   },
   {
    "id": "6.8",
    "title": "How do you assure the environmental reporting requested from your NSP, as a client? What data points are reported? How do you provide this reporting, if you are a NSP?",
    "rationale": "",
    "total": 6.0,
    "criteria": [
     {
      "text": "Emissions under all scopes (1, 2 and 3 of the GHG Protocol) are requested from the NSP (or provided by the organisation if it is an NSP).",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The reporting requested (or provided) must include not only GHG emissions (including fugitive emissions of coolant, for example), but also other environmental impacts:<br>• Water consumption and WUE indicator<br>• CO₂ equivalent emissions and CUE indicator<br>• Depletion of mineral abiotic resources<br>• Primary Energy consumption<br>• Land use.<br>• And other relevant impacts necessary to evaluate impacts on biodiversity, in line with CSRD: acidification of soils and water, eutrophication, etc.",
      "priority": "P1",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "6.9",
    "title": "How does the NSP provide LCA input data?",
    "rationale": "",
    "total": 3.0,
    "criteria": [
     {
      "text": "Input data for a Life Cycle Assessment of any digital service that uses WAN must be requested of the NSP (or provided by the NSP). For example:<br>• Average lifetime of network equipment.<br>• Inventory of infrastructures used by the network (wires, fiber)<br>• Annual consumptions of energy, water and coolant, are provided.<br>• Inventory of IT equipment used to deliver the network services.<br>• Bandwidth used to deliver the services.<br>• Is equipment refurbished or not?<br>• The footprint of the network equipment shall be declared with specific LCAs provided by equipment suppliers.<br>• Quantity of e-Waste/WEEE generated each year.",
      "priority": "P1",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "6.10",
    "title": "What is the NSP’s renewable energy policy? What is the transparency and traceability level on its GHG reporting in respect of renewable energy purchase?",
    "rationale": "",
    "total": 6.0,
    "criteria": [
     {
      "text": "Proportions of electricity under PPA (Power Purchase Agreement), Guarantees of Origins (GoOs) or Renewable Energy Certificates (REC) are declared: % of PPA, % of GoOs/REC.",
      "priority": "P1",
      "weight": 2.0
     },
     {
      "text": "The emission factors used to convert electricity consumption into GHG emissions are declared and the computation of emissions is justified. (This is easy for electricity procured under PPAs, but generally impossible for electricity covered by GoOs or RECs, except for GoOs associated with new renewable energy power plant and their precise type (photovoltaic, wind turbine or other) and location. It is not possible to justify an emission factor of zero, when we take an approach to LCA in line with ISO 14001.",
      "priority": "P1",
      "weight": 2.0
     },
     {
      "text": "The NSP is asked to declare the proportion of the electricity that it uses that comes from renewable energy sources.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "If the NSP cannot clearly justify segregation of consumption under PPAs and GoOs/RECs, market-based reporting must not be used and only location-based reporting may be used",
      "priority": "P2",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "6.11",
    "title": "What actions are taken to reduce the footprint of WAN equipment?",
    "rationale": "",
    "total": 9.0,
    "criteria": [
     {
      "text": "Relevant eco-labels are requested for selected network equipment. Currently TCO seems to be the only eco-label for network equipment. 80+ and Energy star, which consider only energy performance, are not sufficient. It is highly recommended to ask for a label of type 1 as defined in the ISO14024 standard.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The consumption of electricity by network equipment should be drastically reduced when bandwidth is low (during nights and weekends). Proportional consumption with low threshold, deep sleeping modes.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The lifespan of network equipment must be known and declared.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The DPP (Digital Product Passport) is requested and considered in the selection process. It must conform to the framework of the DPP EU regulation published on 13th June 2024, “Setting of eco-design requirements for sustainable products”.",
      "priority": "P3",
      "weight": 1.0
     },
     {
      "text": "The obsolescence of network equipment is reduced, and its lifespan increased.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   }
  ]
 },
 {
  "number": 7,
  "title": "Chapter 7: Usage & procurement",
  "file": "docs/en/chapters/07-usage-procurement.md",
  "questions": [
   {
    "id": "7.1",
    "title": "What are your sustainability policy and action plan to reduce the number of pieces of IT equipment?",
    "rationale": "End-user devices are responsible for a large part of the environmental footprint of an IT system. Minimizing the amount of equipment by sharing it and avoid duplication, is an efficient way to limit the impacts.",
    "total": 22.0,
    "criteria": [
     {
      "text": "The average number of individual devices (including screens) is quantified per user (and/or per user profiles) and followed. Possibility to have different types of user profiles.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "Actions are taken to reduce this number. For example: removal of fixed IP phones, limitation of double screens to specific user profiles like data scientist. Have only one computer (even for consultants) by promoting VDI.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "The inventory of IT equipment is up to date and can be declared for each department of the organisation.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "Promote BYOD (Bring Your Own Device) or COPE (Corporate Owned Personal Equipment). Knowing that NIS 2 will advocate COPE rather than BYOD.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "The organisation has deployed or requested technical solutions enabling its subcontractors to avoid having one computer for work on their client’s site and one for work on their own company’s sites. It is part of the “Mastering” and cybersecurity policy.",
      "priority": "P2",
      "weight": 4.0
     }
    ]
   },
   {
    "id": "7.2",
    "title": "What are the requested environmental and societal criteria, or the deployed best practices, to reduce the footprint of IT equipment?",
    "rationale": "Efficient action can be achieved to limit the impacts of IT equipment by selecting equipment that are eco-designed and respect eco-labels.",
    "total": 23.0,
    "criteria": [
     {
      "text": "Environmental criteria are requested and contribute to the selection process during Calls for Tender (for both leasing and buying contracts).",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "A Sustainable IT Procurement guide is known and respected; for example, the GANR from the DINum.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "Relevant eco-labels, covering the whole life cycle of equipment (raw material, manufacturing, repair index, protection index, capacity to dismantle and recycle) are known and requested taking into account specificities of the equipment. Globally EPEAT and TCO are the most relevant eco-labels. Energy star and 80+ eco-labels are not considered as sufficient (even if embedded in TCO and EPEAT) as they consider energy performance only during the usage phase.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "The selection of IT equipment is made recognizing the initiatives that companies have taken to consider and reduce the environmental and societal footprint of their products in respect of the extraction of raw materials; for example, by contributing to the Responsible Minerals Institute. The concrete result of such an initiative shall be quantified and declared. For example, how many children no longer work in the mines and go now to school, how and by how much water consumption has been reduced, etc.",
      "priority": "P1",
      "weight": 3.0
     },
     {
      "text": "Having soldered batteries in portable equipment must be prohibited.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Both environmental and societal criteria are considered in the requested eco-labels.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Regulation is respected by requesting the Carbon footprint of the product.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Functional economy is promoted, through leasing or DaaS (Device as a Service) for example, unless ownership demonstrates a lower Total Cost of Ownership and a longer lifespan.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "The integration of recycled components or raw material in any new equipment, must be requested, differenciating metals and plastics.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Default configuration of Operating Systems (for sleeping modes for example) are parameterized and cannot be modified by end users unless they have administration rights.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "7.3",
    "title": "More specifically, what do you do to increase the lifespan of IT equipment?",
    "rationale": "Efficient action can be taken to limit the impacts of IT equipment; increasing its lifespan, is the first priority.",
    "total": 17.0,
    "criteria": [
     {
      "text": "Lifespan of each type of equipment is requested of manufacturers, declared, and assessed.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "Second hand “life” is clearly defined and monitored: declared lifespan of secondhand equipment is requested from, or provided by suppliers. A “deposit return scheme” for IT equipment could help give manufacturers or sellers access to this information.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "Best practices are deployed to encourage end users to take care of their equipment: for example, proposing to employees that they buy for personal use their used professional equipment, or giving it away (if it is more than 4 years old, for example). Raise awareness of risky behavior (walking with open computers, for example).",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Repair of equipment on site is enabled: the means to change screens, or batteries, for smartphone, for example.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Equipment is reused: for example, developers’ powerful computers are reused for office tasks. Their number is quantified.",
      "priority": "P2",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "7.4",
    "title": "What do you do to fight the different types of obsolescence?",
    "rationale": "Obsolescence leads to the renewal of IT equipment more often than would be necessary if we fought it. Different types of obsolescence must be considered:\n• Hardware obsolescence in respect of maintenance and parts availability,\n• Software obsolescence in respect of security support or compatibility issues (For example: Operating System update).\n• But also, societal obsolescence through the effects of fashion and marketing.",
    "total": 16.0,
    "criteria": [
     {
      "text": "OS or software suppliers are asked to separate security updates from functionality updates, with the ability to install only the security ones.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "Open Source solutions, like open hardware, are also an opportunity to fight obsolescence. They should be promoted inside the organisation.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "During the delivery of a new equipment, initiatives exist to make the end user aware of the environmental and societal footprint of this equipment.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Policy and actions are in place to fight the three types of obsolescence:<br>• Psychological & societal obsolescence: by working on awareness and telling new stories.<br>• Software obsolescence: by promoting Open Source and Operating Systems with long term support – a minimum of 7 years is line with the German regulation.<br>• Hardware obsolescence: by promoting software ecodesign, capacity to upgrade the hardware (change CPU, add RAM capacities with free slots, for example).",
      "priority": "P2",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "7.5",
    "title": "What are the best and specific practices that you adopt for printing?",
    "rationale": "It is not obvious whether reading a document on a screen has a lower footprint than reading a printed document (cf. ADEME study specifying the conditions under which one option or the other is the best), however best practices exist and are easily deployable to reduce the footprint of printing services.",
    "total": 16.0,
    "criteria": [
     {
      "text": "Only Multi-Functional Printers (MFP) should be used and shared.",
      "priority": "P1",
      "weight": 2.0
     },
     {
      "text": "The number of printers must be surveyed with the objective of optimizing it. For example: a maximum of one MFP per floor or two per building.",
      "priority": "P1",
      "weight": 2.0
     },
     {
      "text": "Relevant eco-labels, with criteria specific to printing, such as Blue Angel, shall be requested for the printers during Calls for Tender.",
      "priority": "P1",
      "weight": 2.0
     },
     {
      "text": "Individual printers must be banned, for health reasons (to avoid fine particulates pollution in office air).",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "It is highly recommended to request MFPs with toner cartridges that can be refilled on site and by qualified external companies (not necessarily the manufacturer or its maintenance partner), while maintaining all Guarantees.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Printing figures should be communicated individually to users, with comparison to average volumes possible.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "During for Calls for Tender, it is highly recommended to request from the suppliers technical characteristics for both virgin and recycled paper, required to maintain Guarantees, even if the paper used is not the one sold by the printer manufacturer. Indeed, some printers’ manufacturers try to impose the use of their own paper (virgin or recycled).",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Recycled paper should be adopted, and printing parameters should be set “for printing on recycled paper by default.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Default printing parameters should be for black and white, and recto/verso, with ink saving mode activated.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Default fonts used for document templates should promote the ones that consume less ink.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Recycled paper should be grey or chlorine-free white, because whitening agents can be very polluting.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Relevant eco-labels such as FSC or Blue Angel, or European ecolabels, or NF environment, must be requested for virgin and recycled papers.",
      "priority": "P2",
      "weight": 1.0
     },
     {
      "text": "Challenge printing versus digital in terms of environmental footprint, knowing that some Life Cycle Assessments prove that there is no absolute answer to this question and that the conclusion depends on the environmental criteria considered (greenhouse gas vs water, for example) and on the frequency of reading or upload.",
      "priority": "P2",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "7.6",
    "title": "How do you adapt IT equipment to people who are in disabled situation or who have specific adaptation needs?",
    "rationale": "People who are in disabled situations may need specific equipment that enables them to work in a more efficient way or with a higher level of comfort. This is a part of “adaptation of the workplace”.",
    "total": 6.0,
    "criteria": [
     {
      "text": "The organisation proposes specific IT equipment or accessories (keyboard, mice) for people who are in disabled situation or who have specific adaptation needs.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "People in charge of disability inclusion programmes, ergonomic specialists and people who are in disabled situation or who themselves have specific adaptation needs, are involved in the selection of this equipment.",
      "priority": "P2",
      "weight": 2.0
     }
    ]
   }
  ]
 },
 {
  "number": 8,
  "title": "Chapter 8: Contribution to the sustainable IT ecosystem",
  "file": "docs/en/chapters/08-ecosystem-contribution.md",
  "questions": [
   {
    "id": "8.1",
    "title": "How does the supplier engage dedicated resources to contribute to the progress of the Sustainable IT ecosystem?",
    "rationale": "By sharing experience, organisations can learn from each other and progress faster than if they go solo.",
    "total": 100.0,
    "criteria": [
     {
      "text": "The supplier contributes to forums and conferences dedicated to Sustainable IT. And it has a global knowledge of the associations and NGOs involved in the Sustainable IT ecosystem globally.",
      "priority": "P1",
      "weight": 30.0
     },
     {
      "text": "The supplier contributes to workgroups that produce reference documents and standards, share experience and contribute to digital commons.",
      "priority": "P2",
      "weight": 20.0
     },
     {
      "text": "The supplier is involved in forums with academic players (e.g.: Universities, Engineering schools) in order to benefit from recent progress on knowledge and skills. Collaboration with students is promoted through internships for example.",
      "priority": "P2",
      "weight": 20.0
     },
     {
      "text": "The supplier promotes Open Source in its usage and creation of digital services, in a spirit of sharing “digital commons”",
      "priority": "P2",
      "weight": 20.0
     },
     {
      "text": "The supplier has processes to enable its employees to have external contributions (awareness, digital collage) or to help associations (Example: climate collage, future of Tech, Designers Ethiques, etc.). Illustration: wenabi or vendredi platforms for skills sponsorship.",
      "priority": "P3",
      "weight": 10.0
     }
    ]
   }
  ]
 },
 {
  "number": 9,
  "title": "Chapter 9: Digital Services",
  "file": "docs/en/chapters/09-digital-services.md",
  "questions": [
   {
    "id": "9.1",
    "title": "How do you take into account the environmental and societal footprint of the digital services that you develop or use, in your organisation?",
    "rationale": "The environmental footprint of IT is clearly due to equipment, but hardware has just one function: running software. Thus, by working on digital services we can also reduce the need of hardware resources, fight against their obsolescence and increase their lifespan.",
    "total": 25.0,
    "criteria": [
     {
      "text": "The bidder has launched an initiative to consider the environmental and societal footprint of digital services in its selection or development process.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "The footprint evaluation is done under Life Cycle Assessment methodologies. The LCA must be multicriteria and have a critical review.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "The link between the software and hardware has been made, taking into account the environmental footprint of the digital service due to hardware (manufacturing and energy consumption) but also that the hardware is used to run software, thus working on the sufficiency of software is mandatory for reducing hardware requirements.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "The footprint evaluation must conform to the Digital Services PCR and its specific derivatives.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Reporting is done in line with CSRD at the level of digital service.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Enterprise and IT architects are involved in the Sustainable IT initiative.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "A UX/UI team or competences exist in the organisation. They are always involved at the beginning of any new project or digital service development, as soon as the client requests.",
      "priority": "P2",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "9.2",
    "title": "Have you taken a specific initiative to tackle bloat software and fight obsolescence? On which eco-design and accessibility references is your initiative based?",
    "rationale": "Enabled by Moore’s law, software demands more and more resources and computation. Niklaus Wirth showed that software gets slower more rapidly than hardware becomes faster (Wirth’s law). This divergence is not sustainable and the only way to address it is to eco-design digital services.",
    "total": 25.0,
    "criteria": [
     {
      "text": "The bidder knows the different eco-design references (at least two, for example: RGESN, GR491, SDIA, AFNOR Spec) and accessibility references (WCAG/RGAA) in existence for digital services.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "The bidder has launched an initiative to adapt these references to its own IT organisation, creating a specific reference that its suppliers apply and request in Calls for Tenders.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "Decommissioning is foreseen in the life cycle of any digital service, including a fixed date for challenging the need for the service.",
      "priority": "P1",
      "weight": 4.0
     },
     {
      "text": "The value of a digital service for the business is considered and challenged in terms of its Return On Invest and Impacts (ROII).",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "Evaluate the maturity index of any new digital service, based on the requirements requested in this reference and the best practices of the ecodesign references.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Actions to fight software obsolescence and fashion obsolescence are taken.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Action is taken to limit the increase in demand- for hardware IT resources, and to fight Wirth’s law.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "A “3U” policy is respected: each digital service has to prove that it is Useful, its capacity to be Used by any and only people who need it is demonstrated, and finally its real Usage is frequently checked.",
      "priority": "P2",
      "weight": 2.0
     },
     {
      "text": "IT resources are challenged even during the use of the digital service and scalability of virtual machines is promoted.",
      "priority": "P3",
      "weight": 1.0
     }
    ]
   },
   {
    "id": "9.3",
    "title": "How do you master multidisciplinary competences, and interdependencies, to raise synergies between cybersecurity, sustainable IT, architecture, quality and strategy? For example, considering Open Source.",
    "rationale": "When creating an eco-design reference, we notice that some best practices are not specific to Sustainable IT but are fundamentals of UX/UI jobs, for example, or are basics of a quality process, they can also be an opportunity for cybersecurity by encouraging a reduction in the attack surface, for example. These synergies must be identified and used operationally. The 3 Pillars (3P) of Sustainability, People, Planet, Prosperity, may become 4P with Protection.",
    "total": 25.0,
    "criteria": [
     {
      "text": "All departments of the digital department of the organisation contribute to the sustainable IT initiative and the decrease in the footprint of digital services; both hardware and software competences are represented, including cybersecurity and the Service Level Agreement (SLA).",
      "priority": "P1",
      "weight": 10.0
     },
     {
      "text": "Synergies between cybersecurity, maintainability, Total Cost of Ownership and Sustainability are considered in technical decisions. Security and Sustainability by design are both considered and may be merged. For example: having an updated CMDB.",
      "priority": "P2",
      "weight": 8.0
     },
     {
      "text": "Opportunities for Open Source are considered in order to reduce the dependency on some suppliers and increase the interoperability, sovereignty and resiliency of the IT Department.",
      "priority": "P2",
      "weight": 7.0
     }
    ]
   },
   {
    "id": "9.4",
    "title": "How do you take into account specificities induced by data management and Artificial Intelligence?",
    "rationale": "Artificial Intelligence (AI) frequently reflects Human Intelligence, including its different types of biases. It also requires a lot of data, servers and energy for its learning phases, and the most popular generative AI can be used by millions of people, resulting in massive rebound effects that are already visible in the Corporate Sustainability Reports of major players, threatening their climate engagement. Specific actions must be launched to avoid compromising the sustainability of all the IT industry.",
    "total": 25.0,
    "criteria": [
     {
      "text": "The use of AI is transparent and challenged for any digital service, considering whether alternative solutions with lower impacts can replace it.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The guides and reference specific to AI are known and effectively used (e.g.: AI guide - RIA31 - from the Institute for Sustainable IT, AFNOR specification for frugal AI).",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "A Data Management policy is deployed in the organisation, respecting regulation (GDPR), including for AI use, promoting the quality of the data and limiting its proliferation, as a massive increase in poor-quality data is a real brake to AI sustainable development of AI.",
      "priority": "P2",
      "weight": 5.0
     },
     {
      "text": "Data governance considers the type of data and encourages to respect for the real need: for example, video formats are challenged in favour of audio or written data, in box mails have a limited lifetime.",
      "priority": "P2",
      "weight": 4.0
     },
     {
      "text": "The global and exhaustive volume of stored data, and the volume of used data should be monitored and communicated at least each year, both for internal and external data storage.",
      "priority": "P2",
      "weight": 4.0
     }
    ]
   }
  ]
 },
 {
  "number": 10,
  "title": "Chapter 10: Societal impacts",
  "file": "docs/en/chapters/10-societal-impacts.md",
  "questions": [
   {
    "id": "10.1",
    "title": "How is the organisation engaged in diversity promotion and how does it fight all types of segregation within IT and digital? Do the taken actions cover the top management (executive committee or administration council) level too with quantified figures?",
    "rationale": "Diversity is a real vector of resilience and health of companies. For example, the percentage of women in high technologies can vary a lot according to the types of jobs and the level of management, with frequent “glass ceilings”. Some jobs dealing with sustainability are contributing to feminize IT with jobs that are more human centric, UX/UI for example, they are a real opportunity.",
    "total": 20.0,
    "criteria": [
     {
      "text": "The organisation is able to quantify the feminization rate of its staff and top management. The feminization rate of top management (Executive committee and administration committee) is at least the same as that of the rest of the organisation. Other genders and types of diversities are also considered.",
      "priority": "P1",
      "weight": 8.0
     },
     {
      "text": "There is a HR policy to progress the feminization rate of staff, to promote diversity and to fight all types of racial or gender discrimination. Atypical IT professional training and experiences are a way to promote diversity in recruiting engineers.",
      "priority": "P1",
      "weight": 8.0
     },
     {
      "text": "Sustainable IT is considered to be an opportunity to contribute to the feminization of IT profiles, the promotion of diversity and to gender equality. Indeed, people contributing to the Sustainable IT workgroups greatly respect parity and diversity.",
      "priority": "P2",
      "weight": 4.0
     }
    ]
   },
   {
    "id": "10.2",
    "title": "How do you ensure the ethical level of your Sustainable IT initiative?",
    "rationale": "New technologies can be badly used and induce real ethics issues, such as biases revealed in some AI tools. To identify these risks and mitigate them, teams with competences must be empowered to do so.",
    "total": 15.0,
    "criteria": [
     {
      "text": "An ethics or deontological committee exists in the organisation to anticipate and solve potential ethics issues, conflicts of interest and cognitive biases. The organisation should be vigilant towards AI specifically.",
      "priority": "P1",
      "weight": 15.0
     }
    ]
   },
   {
    "id": "10.3",
    "title": "How far is your organisation engaged in promoting digital inclusion, fighting “illectronism” and improving accessibility?",
    "rationale": "If IT is a great way to share information and communicate worldwide, it can also introduce gaps between employees that are familiar with high technologies and employees that have difficulties in accessing to them, in accessing training, and in maintaining competences. This gap can also be due to different types of disabilities that are not always easy to see or identify and that can be very frequent; for example, Daltonism.",
    "total": 20.0,
    "criteria": [
     {
      "text": "Accessibility topics are known to be specific in IT and are not limited to those associated with physical disabilities. Training to raise awareness of accessibility is given in order to encourage an inclusive culture. Specific references exist, they are known and respected in setting accessibility standards in a digital service used in the organisation. This internal reference can be included in the ecodesign process.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "Staff are trained and certified in digital accessibility. The number of employees trained and certified is declared",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "Regulation about digital accessibility (EU Accessibility Act) is known and respected. For example: accessibility rates of internal tools or website are declared.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "The opportunity to have contributions from training organisations that contribute to improving employment access, reinsertion, or continuous training shall be considered. This opportunity embraces digital inclusion, employee’ diversity and apprenticeships. Example: Simplon Association in France.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Helpdesk and technical support propose specific solutions for people who are in disabled situations and could face difficulties with classical procedures.",
      "priority": "P3",
      "weight": 2.0
     }
    ]
   },
   {
    "id": "10.4",
    "title": "What kind of physical psychosocial risks induced specifically by ICT does your organisation consider? What actions have been taken to prevent them?",
    "rationale": "That digital tools now enable us to be permanently connected is increasingly a factor in social disease such as burn-out and can be the cause of some types of work addiction. Detecting such situations is key to preventing them. In order to set reference points, best practices and limits shall be declared and encouraged. IT equipment can also be the means to work in better conditions and promote well-being.",
    "total": 16.0,
    "criteria": [
     {
      "text": "The organisation has taken action to prevent hyper-connection and digital addiction. The right to disconnection is recognized and promoted through concrete HR processes. Example: time that he or she spends on smartphones and computers can be communicated to an employee, respecting GDPR rules.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "The balance between professional and personal life is promoted and surveyed. Notifications out of working time, for example, shall be inhibited.",
      "priority": "P1",
      "weight": 5.0
     },
     {
      "text": "The IT Policy promotes ergonomic IT tools and equipment to enable well-being and prevent professional diseases (both at office and in homeworking). Example: prevention of musculoskeletal disorders.",
      "priority": "P2",
      "weight": 3.0
     },
     {
      "text": "Socio-psychologic risks relative to homeworking, for example social exclusion, are known and actions are launched to prevent them.",
      "priority": "P2",
      "weight": 3.0
     }
    ]
   },
   {
    "id": "10.5",
    "title": "How do you consider and minimize the social impacts of your activities, considering the whole life cycle of IT products and services? From mining to e-waste disposal?",
    "rationale": "Like the environmental impacts of IT, the social impacts of the value chain are predominant:\n• in the upstream value chain (mining, conflict minerals, child labour, no schooling), in the manufacturing (working conditions in factories, forced labour, child labour);\n• in the downstream value chain: massive international trafficking of WEEE, exportation to southern countries without standards for social conditions, work in landfills, diseases, modern slavery and child labour.\nHelpdesk services also merit specific attention.",
    "total": 29.0,
    "criteria": [
     {
      "text": "In its Calls for Tender, the organisation should require and demand respect for human rights in its value chain. The requirements should be aligned with due diligence regulation. The value chain must cover assembly of IT equipment as well as raw material extraction and refining, or the manufacturing of electronic components.",
      "priority": "P1",
      "weight": 7.0
     },
     {
      "text": "Amongst human rights, avoidance of child labor is the minimum but NOT SUFFICIENT: the requirements must also include respect of the right of children to education and the creation of free schools in the regions where mining companies work. When children stop working, they cannot access to school anymore in countries where education is not free. Delivering these requirements requires cooperation with local NGOs.",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "The highest standards are requested from suppliers that manage the organisation’s e-waste (or WEEE). In line with the Due Diligence regulation, the supplier must ensure that there is no risk of contributing to the illegal trafficking of e-waste (70% of European WEEE feeds it), and that e-waste won’t be exported to southern countries (Ghana, Nigeria and India for example).",
      "priority": "P1",
      "weight": 6.0
     },
     {
      "text": "All stakeholders involved in the manufacture of IT equipment should contribute to non-profit associations or NGOs that work for a more responsible mining industry (for example the Good Electronics network, the RMI – Responsible Minerals Initiative or the IRMA – Initiative for Responsible Mining Assurance). They should encourage their supplier to do so.",
      "priority": "P2",
      "weight": 5.0
     },
     {
      "text": "A specific watch on social conditions of subcontractors offering technical support or helpdesk services, is requested and assured especially when delivery of these services is off-shored in distant countries.",
      "priority": "P2",
      "weight": 5.0
     }
    ]
   }
  ]
 }
]