Provision of a Governance Risk Compliance Tool
key details
| Status | active |
|---|---|
| Category (CPV) | 48730000 |
| Deadline | 10 May 2022 |
| Procedure | selective |
| OCID | ocds-h6vhtk-032e86 |
description
FCDO are looking to a third party to introduce and implement a new GRC tool to be used by ICSU for information security risk management and assurance activities. The tool will be used to record all risks above risk appetite, track actions and communicate with risk owners and action owners. The tool will be used to record all FCDOs systems and services, their assurance status, outstanding tasks and send reminders to users for system reviews.
Functional requirements (for the tool)
| • | Centrally capture information security risks, security vulnerabilities, audit findings, regulatory obligations and other issues across technology infrastructure |
| • | Centrally capture a set of IT systems and services and their assurance status |
| • | A mechanism for reporting to colleagues as well as up to board level |
| • | Up to 50 users (but should be scalable) with varying access requirements (e.g. those reviewing risks, those reviewing assurance) |
Non-functional
| • | Tool platform should be subject to a recognised security certification (ISO/IEC 27001:2013 / Cyber Essentials or equivalent) |
| • | Minimum of SC clearance for all individuals accessing sensitive FCDO information and data |
| • | Tool vendor must have an annual IT Health Check performed by a certified CHECK company |
| • | Support multi-factor authentication and single sign on |
| • | Compliant with data protection legislation |
| • | Documented threat management processes and tools |
| • | Ability to integrate with FCDO incident management processes and procedures |
| • | Follows NCSC good cloud security principles and guidance (https://www.ncsc.gov.uk/collection/cloud-security) |
| • | Named UK data centre, with all processing capability and call centre support within UK and EU |
| • | Return To Operation (RTO) time should be no more than 24 hours and Return Point Objectives (RPO) time no more than 1 hour |
Implementation & Training
| • | Bidders will be asked to demonstrate a minimum viable product (MVP) as part of any procurement and be potentially able to deploy into a live environment within 3 months of contract |
| • | Throughout implementation, the tool platform should be tailored as appropriate for the business needs of the FCDO |
| • | Capability to supply end-to-end training on the tool platform, including train the trainer and comprehensive documentation |
Maintenance, support, system updates
| • | Provide support for end users |
| • | Ensure the platform is kept up-to-date, patching should be maintained at N-1 |
notice history
1 notice published against this procurement.
| Published | Type | Regime | Notice |
|---|---|---|---|
| 19 Apr 2022 | Prior information notice (F01) | Earlier regulations | 010218-2022 |
more from Foreign Commonwealth and Development Office
- Evaluation of Growth Gateway and Manufacturing Africa · £449,112 · 23 Jul 2026
- Independent Endline Evaluation of the Gender and Adolescence Global Evidence Programme (GAGE) · £205,000 · 2 Jul 2026
- CCS Design and Project Management Services for Cladding Replacement at Jakarta Embassy, Indonesia · 29 Jun 2026
- CCS Design & Project Management Services for Cladding Replacement at Manila Embassy, Philippines · 25 Jun 2026
- Consular Salesforce Licences · £2,867,557 · 23 Jun 2026
- FCDO Port Louis New HC Residence Project Stage 4 Design Peer Review Services · 23 Jun 2026
- ISF Cyber: Advanced Balkan Cyber Programme - Lot 2 · £131,847 · 11 Jun 2026
- CCS PM and Design Ottawa Residence Refurbishment · 2 Jun 2026
all contracts from this buyer →
similar contracts awarded
Other awarded contracts in the same category. Useful for seeing who normally wins this kind of work, and at what value.
- DDaT25239 - Vulnerability scanning and management Solution · UK SHARED BUSINESS SERVICES LIMITED · £302,369
- Cellebrite Licence Renewal -Beds · The Police and Crime Commissioner for Bedfordshire · £205,030
- Award of Cisco Secure Access and Umbrella Security Subscription (Further Competition GCA RM6098 L... · Argyll and Bute Council
- Provision of Forescout Licenses Renewal · National Oceanography Centre · £43,128
- RoS - SG SVARS - Change Manager for Group Policy · Registers of Scotland · £54,787
- Third-party Risk Management (TPRM) managed service for NHS Southeast region · NHS SOUTH, CENTRAL AND WEST COMMISSIONING SUPPORT UNIT
- DA from the CCS G Cloud 14 FW for the Risk Ledger, vendor risk management and supply chain security platform contract · Stockton-on-tees Borough Council · £103,500
- Fortigate Firewalls - 26/31 · Surrey and Borders Partnership NHS Foundation Trust · £280,723
source
Published on Find a Tender. Contact details for named individuals are not reproduced on this site.