Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-04db93-2025-09-10T10:47:31+01:00",
    "date": "2025-09-10T10:47:31+01:00",
    "ocid": "ocds-h6vhtk-04db93",
    "initiationType": "tender",
    "tender": {
        "id": "ocds-h6vhtk-04db93",
        "legalBasis": {
            "id": "32014L0024",
            "scheme": "CELEX"
        },
        "title": "Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution",
        "status": "complete",
        "classification": {
            "scheme": "CPV",
            "id": "72212170",
            "description": "Compliance software development services"
        },
        "mainProcurementCategory": "services",
        "description": "A license agreement for the usage of an integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications",
        "lots": [
            {
                "id": "1",
                "description": "A license agreement for a suite of integrated applications that operate at both OFFICIAL and SECRET using on premise facilities as required by the Authority.",
                "hasOptions": true,
                "options": {
                    "description": "1 x 12 month optional extension"
                },
                "awardCriteria": {
                    "criteria": [
                        {
                            "type": "price"
                        }
                    ]
                },
                "status": "cancelled"
            }
        ],
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "72262000",
                        "description": "Software development services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKJ1"
                    },
                    {
                        "region": "UKJ1"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "procurementMethod": "limited",
        "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
        "procurementMethodRationaleClassifications": [
            {
                "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
                "id": "D_OUTSIDE_SCOPE",
                "description": "The procurement falls outside the scope of application of the directive"
            }
        ],
        "procurementMethodRationale": "Air Command, part of the UK Ministry of Defence (the Authority), has awarded a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; 'the Solution' will maintain the Authority's existing Performance And Risk Management Information System (PARMIS) Platform. In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons. The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command's organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. there is no other economic operator that can provide this capability and meet Air's delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.",
        "amendments": [
            {
                "id": "3",
                "unstructuredChanges": [
                    {
                        "newValue": {
                            "text": "Air Command, part of the UK Ministry of Defence (the Authority), intends to award a Single Source contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; 'the Solution' will maintain the Authority's existing Performance And Risk Management Information System (PARMIS) Platform. The estimated value of the contract is PS2.78M inc VAT/yr. In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons. The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command's organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. Analysis of Crown Commercial Frameworks indicates that there is no other economic operator that can provide this capability and meet Air's delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information."
                        },
                        "where": {
                            "section": "7",
                            "label": "Explanation"
                        }
                    }
                ]
            },
            {
                "id": "4",
                "unstructuredChanges": [
                    {
                        "oldValue": {
                            "text": "The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command's organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available."
                        },
                        "newValue": {
                            "text": "Air Command, part of the UK Ministry of Defence (the Authority), intends to award a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; 'the Solution' will maintain the Authority's existing Performance And Risk Management Information System (PARMIS) Platform. The estimated value of the contract is PS8.28M inc VAT. In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons. The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command's organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. there is no other economic operator that can provide this capability and meet Air's delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information."
                        },
                        "where": {
                            "section": "IV.1",
                            "label": "Explanation"
                        }
                    }
                ],
                "description": "The text to be corrected in the original notice at VII.1.2 above also replaces the text at VII.1.2 in the Corrigendum with reference number 2025/S 000-003768. This notice is not a request for expressions of interest so please do not apply to be invited to tender. This notice advises that the Authority has decided to negotiate a contract with the named supplier on a single source basis, and is published for reasons of transparency. If you are interested in becoming a sub-contractor for this requirement, you should apply directly to the supplier named above."
            }
        ]
    },
    "awards": [
        {
            "id": "003702-2025-713878451-1",
            "relatedLots": [
                "1"
            ],
            "title": "Provision of a Governance, Risk Management and Compliance (GRC) Software",
            "status": "active",
            "hasSubcontracting": true,
            "suppliers": [
                {
                    "id": "GB-FTS-137070",
                    "name": "Riskonnect Limited"
                }
            ]
        },
        {
            "id": "055285-2025-713878451-1",
            "relatedLots": [
                "1"
            ],
            "title": "Provision of an Enterprise Governance, Risk Management and Compliance Solution",
            "status": "active",
            "suppliers": [
                {
                    "id": "GB-FTS-160352",
                    "name": "Riskonnect Limited"
                }
            ]
        }
    ],
    "parties": [
        {
            "id": "GB-FTS-98960",
            "name": "Air Commercial",
            "identifier": {
                "legalName": "Air Commercial"
            },
            "address": {
                "streetAddress": "Flowerdown Hall, RAF Cosford",
                "locality": "Wolverhampton",
                "region": "UK",
                "postalCode": "WV7 3EX",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "name": "Morgan Buckley",
                "email": "morgan.buckley116@mod.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.contracts.mod.uk",
                "classifications": [
                    {
                        "scheme": "TED_CA_TYPE",
                        "id": "MINISTRY",
                        "description": "Ministry or any other national or federal authority, including their regional or local subdivisions"
                    },
                    {
                        "scheme": "COFOG",
                        "id": "02",
                        "description": "Defence"
                    }
                ]
            }
        },
        {
            "id": "GB-FTS-137070",
            "name": "Riskonnect Limited",
            "identifier": {
                "legalName": "Riskonnect Limited"
            },
            "address": {
                "streetAddress": "3rd Floor 70 Gracechurch Street",
                "locality": "London",
                "region": "UK",
                "postalCode": "EC3V 0XL",
                "countryName": "United Kingdom"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "large"
            }
        },
        {
            "id": "GB-FTS-137071",
            "name": "Air Commercial",
            "identifier": {
                "legalName": "Air Commercial"
            },
            "address": {
                "streetAddress": "Nimrod Building, 3 Site",
                "locality": "High Wycombe",
                "postalCode": "HP14 4UE",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "email": "morgan.buckley116@mod.gov.uk"
            },
            "roles": [
                "reviewBody"
            ]
        },
        {
            "id": "GB-FTS-10917",
            "name": "Ministry of Defence",
            "identifier": {
                "legalName": "Ministry of Defence"
            },
            "address": {
                "streetAddress": "Flowerdown Hall, RAF Cosford",
                "locality": "Wolverhampton",
                "region": "UKG39",
                "postalCode": "WV7 3EX",
                "countryName": "United Kingdom"
            },
            "contactPoint": {
                "name": "Morgan Buckley",
                "email": "morgan.buckley116@mod.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://www.contracts.mod.uk",
                "classifications": [
                    {
                        "scheme": "TED_CA_TYPE",
                        "id": "MINISTRY",
                        "description": "Ministry or any other national or federal authority, including their regional or local subdivisions"
                    },
                    {
                        "scheme": "COFOG",
                        "id": "02",
                        "description": "Defence"
                    }
                ]
            }
        },
        {
            "id": "GB-FTS-160352",
            "name": "Riskonnect Limited",
            "identifier": {
                "legalName": "Riskonnect Limited"
            },
            "address": {
                "locality": "London",
                "region": "UKI",
                "countryName": "United Kingdom"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "scale": "large"
            }
        },
        {
            "id": "GB-FTS-12736",
            "name": "Ministry of Defence",
            "identifier": {
                "legalName": "Ministry of Defence"
            },
            "address": {
                "locality": "High Wycombe",
                "countryName": "United Kingdom"
            },
            "roles": [
                "reviewBody"
            ]
        }
    ],
    "buyer": {
        "id": "GB-FTS-10917",
        "name": "Ministry of Defence"
    },
    "contracts": [
        {
            "id": "003702-2025-713878451-1",
            "awardID": "003702-2025-713878451-1",
            "title": "Provision of a Governance, Risk Management and Compliance (GRC) Software",
            "status": "active",
            "value": {
                "amount": 6672000,
                "currency": "GBP"
            },
            "dateSigned": "2025-02-04T00:00:00Z"
        },
        {
            "id": "055285-2025-713878451-1",
            "awardID": "055285-2025-713878451-1",
            "title": "Provision of an Enterprise Governance, Risk Management and Compliance Solution",
            "status": "active",
            "value": {
                "amount": 7208697,
                "currency": "GBP"
            },
            "dateSigned": "2025-07-23T00:00:00+01:00"
        }
    ],
    "language": "en",
    "bids": {
        "statistics": [
            {
                "id": "1",
                "measure": "bids",
                "relatedLot": "1",
                "value": 1
            }
        ]
    }
}