IT services: consulting, software development, Internet and support

Tender description

The contracting entity intends to procure a contract to supply, implement and host an integrated Risk Management SaaS solution. Integrated risk management enables simplification, automation and integration of strategic, operational and IT risk management processes and data. Integrated Risk Management (IRM) solutions combine technology, processes and data that fulfil the objective of enabling the simplification, automation and integration of strategic, operational and IT risk management across the organization. Applicants must be able to provide an Integrated Risk Management SaaS solution across the following use cases; — vulnerability risk management — information and Cybersecurity risk management — incident management — vendor risk management — GDPR Compliance risk management — policy management — enterprise risk management — NIS Regulation Compliance Risk Management. The contracting entity intends to procure a contract to supply, implement and support an Integrated risk management SaaS solution. The successful provider will already have delivered a similar solution to industries to the scale and requirements that are being sought by ESB and outlined below. The risk management software solution will be required to deliver the following capabilities: — provision, implementation and support of a scalable Integrated Risk Management software solution to support and deliver cybersecurity risk management, policy risk management, GDPR Compliance risk management and NIS Regulation Compliance Risk Management. — the Integrated Risk Management software solution must have KPI Monitoring/Reporting scorecard and dashboard, external data integration and performance metrics — the Integrated Risk Management solution must be a cloud-based SaaS and be fully scalable (for future expansion if necessary), e.g. the solution must be able to cater for an increase in users and increasing data storage or processing power as required in future — the requirement is to support and deliver the following: —— information and Cybersecurity risk management, —— GDPR compliance risk management, —— policy management, —— vendor risk management, —— NIS Regulation Compliance risk Management, — at a later stage, the solution must be able to provide: —— vulnerability risk management, —— incident management, —— enterprise risk management. The proposed solution must have all requirements outlined above at present, but they will be drawn down at a later stage. There will potentially be 122 users of the solution, split between 20 Power Users, 100 users with standard access, and 2 administrators