This public procurement record has 1 release in its history.

Planning

24 Sep 2026 at 10:05

Summary of the contracting process

UK Shared Business Services Ltd intends to procure a risk management and assurance system for organisation-wide governance and compliance. The requirement is for a single integrated software platform to manage risks, controls, audit actions and assurance activities, supporting a Three Lines of Defence model and consistent oversight at team, directorate and corporate levels. Functions are expected to include risk identification, scoring, escalation and links to strategic objectives; setting and monitoring risk appetite, with automated breach identification; assurance workflows, audit and action tracking, control management, compliance mapping and evidence handling. Reporting and dashboards should support operational management and Board-level governance. The system is intended to reduce manual work and improve visibility and decision-making. The procurement is for software and related computer services, for use by UKSBS in the United Kingdom.

This process is at the planning stage: UKSBS has stated an intention to procure and is conducting pre-market engagement to understand suppliers’ capability, capacity and appetite. It expects to publish a future procurement notice by 28 February 2027. The buyer’s indicative contract period is 6 April 2027 to 5 April 2031, with a possible extension to 4 April 2032. The requirement is arranged as one lot. The lot is identified as suitable for small and medium-sized businesses and voluntary, community and social enterprises. The planning information does not set out a procurement procedure, evaluation criteria or contract value. These are not tender deadlines: the stated date for feedback on the market-engagement questions is 14 October 2026.

This requirement is likely to suit suppliers with an established, configurable risk, audit and assurance platform, and the ability to support its implementation and integration with UKSBS’s existing tools. Relevant strengths include enterprise-scale risk and control management, workflow automation, evidence handling, compliance mapping, escalation and risk-appetite monitoring, with clear dashboards for both operational users and senior governance. Suppliers should be prepared to demonstrate how their system supports ISO 27001, the Cyber Assessment Framework and wider Government standards, as well as strong security and access controls. Ease of use and scalability are explicit priorities. UKSBS is seeking a consistent view across teams, directorates and corporate governance, so providers able to handle varied organisational needs while reducing manual effort are well placed to engage during market preparation.

How relevant is this notice?

Notice Information

Notice Title

Risk Management Tool

Notice Description

Define a single integrated system to manage risks, audit actions, controls and assurance activities aligned to UKSBS governance, ISO27001, CAF and Government Standards. UK Shared Business Services (UKSBS) is seeking to understand the market for a Risk Management and Assurance system that can support enterprise-wide governance and compliance aligned to ISO27001, CAF and wider Government standards. The intended solution should provide a single, integrated platform to manage risks, controls, audit actions and assurance activities, supporting a Three Lines of Defence model and enabling a clear, consistent view across team, directorate and corporate levels. The system should facilitate risk identification, scoring, escalation and linkage to strategic objectives, alongside the ability to define and monitor risk appetite, including automated identification of breaches. The solution is also expected to support end-to-end assurance processes, including audit and action tracking, control management, compliance mapping, and evidence handling, with robust reporting and dashboards to support both operational management and Board-level governance. Key considerations include configurability, usability, integration with existing tools, and strong security and access controls. Overall, UKSBS is seeking a scalable and user-friendly solution that reduces manual effort, improves visibility of risks and controls, and strengthens organisational assurance and decision-making

Planning Information

The Contracting Authority UK Shared Business Services - would like to conduct pre-market engagement. As part of this information gathering exercise, we have developed a series of questions to ascertain the capability, the capacity and the appetite of the current market and would welcome your responses. Please see below link which will take you to a form with a list of pre market engagement questions. If you could please provide feedback by Wednesday 14th October 2026 this will be much appreciated. https://forms.cloud.microsoft/e/Fe7Z2VRCbx To Access the Specification which is the current version of the Specification, which will provide further details on the requirement, please contact ddatprocurement@uksbs.co.uk, referencing DDaT26328 & Risk Management and Assurance System pre market engagement so that we can issue you the Document.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-077939
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/090424-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME, VCSE
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support


CPV Codes

48100000 - Industry specific software package

48732000 - Data security software package

72590000 - Computer-related professional services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
24 Sep 20261 weeks ago
Submission Deadline
Not specified
Future Notice Date
28 Feb 20275 months to go
Award Date
Not specified
Contract Period
6 Apr 2027 - 6 Apr 2031 4-5 years
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Planning
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
UK SHARED BUSINESS SERVICES LIMITED
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
SWINDON
Postcode
SN2 1FF
Postcode Area
Swindon
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK71 Swindon
Delivery Location
Not specified

Local Authority
Swindon
Electoral Ward
Rodbourne Cheney
Westminster Constituency
Swindon North

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...