ID 3871582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution

Concepts

• limavady
• information technology
• grc
• the risk stakeholders
• the cyber risk
• these risks
• a governance, risk
• software package
• information systems
• certification

Location

Ballykelly

Description

DAERA Digital Services Division has procured a contract to deliver a Governance, Risk and Compliance (GRC) Solution with modules to support automating and socialising the cyber risk register amongst the risk stakeholders which is driving up the proactive management of these risks. DAERA require a modification of this contract to complete additional works to enable the department to maintain compliance with ISO27001 requirements for certification. The modification value required is £50,000

Award Detail

Renewal Options

The contract commenced on 11 February 2022 for an initial period of 2 years until 10 February 2024. There are 2 optional extension periods of 1 year each.

CPV Codes

• 72000000 - IT services: consulting, software development, Internet and support
• 48000000 - Software package and information systems

Indicators

• Options are available.

Legal Justification

DAERA Digital Services Division has procured a contract to deliver a Governance, Risk and Compliance (GRC) Solution with modules to support automating and socialising the cyber risk register amongst the risk stakeholders which is driving up the proactive management of these risks. DAERA require a modification of this contract to complete additional works to enable the department to maintain compliance with ISO27001 requirements for certification. The modification value required is £50,000 Regulation 72(1)(b) Additional works, services or supplies “have become necessary” and were not included in the initial procurement and a change of supplier would involve substantial inconvenience/duplication of costs - provided the change does not exceed 50% of the value of the original contract.