Integrated Governance, Risk &Compliance (GRC) SaaS solution

Tender description

The Contracting Entity intends to procure a framework agreement for the provision of implementation, Licencing, Support and Maintenance services, for an integrated Governance, Risk &Compliance (GRC) SaaS solution. Background The integrated GRC solution will enable simplification, automation and integration of ESB’s Governance, Risk and Compliance activities. These will include the following: 1. Enterprise Risk Management 2. Governance, Internal Control & Operational Risk Management 3. IT Risk Management 4. Cyber Security Risk Management 5. Policy Management 6. Third party Cyber Security Risk Management 7. Business Continuity Management 8. Audit Management 9. Incident and investigation management and reporting 10. Ethics Management & Compliance Management (This is an optional capability) ESB expects that Integration will provide for: • System KPI monitoring/reporting, scorecards and dashboards, external data integration and performance metrics • Visibility/Access as required across businesses and enterprise based on a permissions system. • Integrated Risk Management, building up an enterprise view of risks and interdependencies Applicants must be able to provide any one or more of the lots below, however ideally ESB wishes to purchase an Integrated SaaS solution providing for all services. ESB is initially seeking to procure a fully integrated IT solution in the form of SaaS, that ideally will consist of all of the 5 following lots: Lot 1 – Business-wide Governance Risk & Compliance (GRC) Lot 2 – Audit Management & Fraud Incident Management Lot 3 – Cyber Security Risk, Third Party & Policy Compliance Management Lot 4 – Business Continuity Management / Business Impact Assessment Lot 5 – IT Governance & Risk Management However, depending on the evaluation of Responses to the Tender, a contract may be awarded for a solution of fewer than 5 lots, in any combination or potentially for none of the lots.