ID 3871582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-038465-2024-01-12T14:36:06Z",
    "date": "2024-01-12T14:36:06Z",
    "ocid": "ocds-h6vhtk-038465",
    "initiationType": "tender",
    "tender": {
        "id": "ocds-h6vhtk-038465",
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        },
        "title": "ID 3871582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution",
        "status": "complete",
        "classification": {
            "scheme": "CPV",
            "id": "72000000",
            "description": "IT services: consulting, software development, Internet and support"
        },
        "mainProcurementCategory": "services",
        "description": "DAERA Digital Services Division has procured a contract to deliver a Governance, Risk and Compliance (GRC) Solution with modules to support automating and socialising the cyber risk register amongst the risk stakeholders which is driving up the proactive management of these risks. DAERA require a modification of this contract to complete additional works to enable the department to maintain compliance with ISO27001 requirements for certification. The modification value required is PS50,000",
        "lots": [
            {
                "id": "1",
                "description": "DAERA Digital Services Division has procured a contract to deliver a Governance, Risk and Compliance (GRC) Solution with modules to support automating and socialising the cyber risk register amongst the risk stakeholders which is driving up the proactive management of these risks. DAERA require a modification of this contract to complete additional works to enable the department to maintain compliance with ISO27001 requirements for certification. The modification value required is PS50,000",
                "hasOptions": true,
                "options": {
                    "description": "The contract commenced on 11 February 2022 for an initial period of 2 years until 10 February 2024. There are 2 optional extension periods of 1 year each."
                },
                "contractPeriod": {
                    "durationInDays": 1440
                }
            }
        ],
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "48000000",
                        "description": "Software package and information systems"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKN"
                    },
                    {
                        "region": "UKN"
                    },
                    {
                        "region": "UKN"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "procurementMethod": "limited",
        "procurementMethodDetails": "Negotiated without publication of a contract notice",
        "coveredBy": [
            "GPA"
        ],
        "reviewDetails": "CPD will comply with the Public Contracts Regulations 2015 (as amended) and, where appropriate, will incorporate a standstill period (i.e. a minimum of 10 calendar days) at the point information on the award of contract is communicated to tenderers. That notification will provide full information on the award decision. This provides time for the unsuccessful tenderers to challenge the award decision before the contract is entered into",
        "procurementMethodRationaleClassifications": [
            {
                "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
                "id": "D_TECHNICAL",
                "description": "The works, supplies or services can be provided only by a particular economic operator due to absence of competition for technical reasons"
            }
        ],
        "procurementMethodRationale": "DAERA Digital Services Division has procured a contract to deliver a Governance, Risk and Compliance (GRC) Solution with modules to support automating and socialising the cyber risk register amongst the risk stakeholders which is driving up the proactive management of these risks. DAERA require a modification of this contract to complete additional works to enable the department to maintain compliance with ISO27001 requirements for certification. The modification value required is PS50,000 Regulation 72(1)(b) Additional works, services or supplies \"have become necessary\" and were not included in the initial procurement and a change of supplier would involve substantial inconvenience/duplication of costs - provided the change does not exceed 50% of the value of the original contract.",
        "amendments": [
            {
                "id": "2",
                "unstructuredChanges": [
                    {
                        "oldValue": {
                            "text": "ID 3781582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution"
                        },
                        "newValue": {
                            "text": "ID 3871582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution"
                        },
                        "where": {
                            "section": "II.1.1)"
                        }
                    }
                ]
            }
        ]
    },
    "awards": [
        {
            "id": "032296-2022-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-68486",
                    "name": "Information Risk Management Ltd"
                }
            ]
        },
        {
            "id": "034530-2022-1-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-68486",
                    "name": "Information Risk Management Ltd"
                },
                {
                    "id": "GB-FTS-70174",
                    "name": "Information Risk Management Ltd"
                }
            ]
        },
        {
            "id": "001112-2024-1",
            "relatedLots": [
                "1"
            ],
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-102349",
                    "name": "INFORMATION RISK MANAGEMENT LIMITED"
                }
            ]
        }
    ],
    "parties": [
        {
            "id": "GB-FTS-68485",
            "name": "Department of Agriculture, Environment and Rural Affairs",
            "identifier": {
                "legalName": "Department of Agriculture, Environment and Rural Affairs"
            },
            "address": {
                "streetAddress": "Jubilee House, 111 Ballykelly Road",
                "locality": "Ballykelly, Limavady",
                "region": "UK",
                "postalCode": "BT49 9HP",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "email": "SSDAdmin.CPD@finance-ni.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://etendersni.gov.uk/epps",
                "buyerProfile": "https://etendersni.gov.uk/epps",
                "classifications": [
                    {
                        "scheme": "TED_CA_TYPE",
                        "id": "BODY_PUBLIC",
                        "description": "Body governed by public law"
                    },
                    {
                        "scheme": "COFOG",
                        "id": "01",
                        "description": "General public services"
                    }
                ]
            }
        },
        {
            "id": "GB-FTS-68486",
            "name": "Information Risk Management Ltd",
            "identifier": {
                "legalName": "Information Risk Management Ltd"
            },
            "address": {
                "streetAddress": "CHELTENHAM HOUSE",
                "locality": "CHELTENHAM",
                "region": "UKN",
                "postalCode": "GL50 3JR",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "email": "SSDAdmin.CPD@finance-ni.gov.uk"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "https://www.finance-ni.gov.uk",
                "scale": "sme"
            }
        },
        {
            "id": "GB-FTS-1202",
            "name": "The UK does not have any special review body with responsibility for appeal/mediation procedures in public procurement competitions. Instead; any challenges are dealt with by the High Court, Commercial Division, to which proceedings may be issued regarding alleged breaches of the PCR 2015.",
            "identifier": {
                "legalName": "The UK does not have any special review body with responsibility for appeal/mediation procedures in public procurement competitions. Instead; any challenges are dealt with by the High Court, Commercial Division, to which proceedings may be issued regarding alleged breaches of the PCR 2015."
            },
            "address": {
                "locality": "Belfast",
                "countryName": "United Kingdom"
            },
            "roles": [
                "reviewBody"
            ]
        },
        {
            "id": "GB-FTS-70174",
            "name": "Information Risk Management Ltd",
            "identifier": {
                "legalName": "Information Risk Management Ltd"
            },
            "address": {
                "streetAddress": "CHELTENHAM HOUSE",
                "locality": "CHELTENHAM",
                "region": "UKN",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "email": "SSDAdmin.CPD@finance-ni.gov.uk"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "https://www.finance-ni.gov.uk",
                "scale": "sme"
            }
        },
        {
            "id": "GB-FTS-102349",
            "name": "INFORMATION RISK MANAGEMENT LIMITED",
            "identifier": {
                "legalName": "INFORMATION RISK MANAGEMENT LIMITED"
            },
            "address": {
                "streetAddress": "CHELTENHAM HOUSE",
                "locality": "CHELTENHAM",
                "region": "UKN",
                "postalCode": "GL50 3JR",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "email": "nina.wright@irmsecurity.com"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "https://www.finance-ni.gov.uk",
                "scale": "sme"
            }
        },
        {
            "id": "GB-FTS-20217",
            "name": "The UK does not have any such bodies with responsibility for appeal/mediation procedures. Instead; any challenges are dealt with by the High Court, Commercial Division, to which proceedings may be issued regarding alleged breaches of the PCR 2015 as amended.",
            "identifier": {
                "legalName": "The UK does not have any such bodies with responsibility for appeal/mediation procedures. Instead; any challenges are dealt with by the High Court, Commercial Division, to which proceedings may be issued regarding alleged breaches of the PCR 2015 as amended."
            },
            "address": {
                "locality": "Belfast",
                "countryName": "United Kingdom"
            },
            "roles": [
                "reviewBody"
            ]
        }
    ],
    "buyer": {
        "id": "GB-FTS-68485",
        "name": "Department of Agriculture, Environment and Rural Affairs"
    },
    "contracts": [
        {
            "id": "032296-2022-1",
            "awardID": "032296-2022-1",
            "status": "active",
            "value": {
                "amount": 150000,
                "currency": "GBP"
            },
            "dateSigned": "2022-02-11T00:00:00Z"
        },
        {
            "id": "034530-2022-1-1",
            "awardID": "034530-2022-1-1",
            "status": "active",
            "value": {
                "amount": 225000,
                "currency": "GBP"
            },
            "dateSigned": "2022-02-11T00:00:00Z",
            "period": {
                "durationInDays": 1440
            },
            "items": [
                {
                    "id": "1",
                    "classification": {
                        "scheme": "CPV",
                        "id": "72000000",
                        "description": "IT services: consulting, software development, Internet and support"
                    },
                    "additionalClassifications": [
                        {
                            "scheme": "CPV",
                            "id": "48000000",
                            "description": "Software package and information systems"
                        }
                    ],
                    "deliveryAddresses": [
                        {
                            "region": "UKN"
                        }
                    ],
                    "relatedLot": "1"
                }
            ],
            "amendments": [
                {
                    "id": "1",
                    "description": "The contract has been modified to allow DAERA to purchase two additional modules (IT Security and Vendor modules) that are required to support DAERA's ISO 27001 certification.",
                    "rationale": "Need for additional works, services or supplies by the original contractor/concessionaire: Additional works have become necessary, therefore DAERA will rely on regulation 72(1)(b) -Additional works, services or supplies \"have become necessary\" and were not included in the initial procurement and a change of supplier would not be practicable (for economic, technical or interoperability reasons) and would involve substantial inconvenience/duplication of costs."
                }
            ]
        },
        {
            "id": "001112-2024-1",
            "awardID": "001112-2024-1",
            "status": "active",
            "value": {
                "amount": 225000,
                "currency": "GBP"
            },
            "dateSigned": "2022-02-11T00:00:00Z"
        }
    ],
    "language": "en"
}