Description of the procurement
The contracting entity intends to procure a contract to supply, implement and support an Integrated risk management SaaS solution.
The successful provider will already have delivered a similar solution to industries to the scale and requirements that are being sought by ESB and outlined below.
The risk management software solution will be required to deliver the following capabilities:
โ provision, implementation and support of a scalable Integrated Risk Management software solution to support and deliver cybersecurity risk management, policy risk management, GDPR Compliance risk management and NIS Regulation Compliance Risk Management.
โ the Integrated Risk Management software solution must have KPI Monitoring/Reporting scorecard and dashboard, external data integration and performance metrics
โ the Integrated Risk Management solution must be a cloud-based SaaS and be fully scalable (for future expansion if necessary), e.g. the solution must be able to cater for an increase in users and increasing data storage or processing power as required in future
โ the requirement is to support and deliver the following:
โโ information and Cybersecurity risk management,
โโ GDPR compliance risk management,
โโ policy management,
โโ vendor risk management,
โโ NIS Regulation Compliance risk Management,
โ at a later stage, the solution must be able to provide:
โโ vulnerability risk management,
โโ incident management,
โโ enterprise risk management.
The proposed solution must have all requirements outlined above at present, but they will be drawn down at a later stage.
There will potentially be 122 users of the solution, split between 20 Power Users, 100 users with standard access, and 2 administrators