Planning

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

GRC Enterprise & Cyber Risk Management RFI ROM

CADENT GAS LIMITED

This public procurement record has 1 release in its history.

Planning

19 Oct 2026 at 09:06

UK2 - Preliminary Market Engagement Notice
Summary of the contracting process

Cadent Gas Limited is exploring a single cloud-based Governance, Risk and Compliance (GRC) software service for enterprise risk management, cyber risk management and internal audit. The system is intended to manage risks, controls, assurance activity, issues, actions, exceptions and audits, and provide reporting across these areas. Cadent wants the solution to support a joined-up risk and control framework aligned with its governance structure and Three Lines Model. The work is a business software service covering risk management and related information systems. The buying organisation is Cadent Gas Limited, a private utility based in Coventry. The procurement is intended to address the organisation’s enterprise-wide governance, assurance and cyber risk needs.

This process is at planning: Cadent is seeking market information through a request for information and request for market (RFI/ROM), not inviting tenders. The engagement is intended to explore supplier capability and solution fit, implementation approach and timescales, licensing models, integration options, migration requirements and high-level costs. Cadent’s stated timetable anticipated issuing the RFI on 19 October 2026, supplier questions by midday on 23 October, clarification on 30 October, and RFI responses by midday on 4 November 2026. The planned contract period is 3 July 2027 to 2 July 2030. No procurement procedure, award method or contract value is set out at this stage; suppliers are being asked for indicative, high-level cost information.

This preparatory engagement is relevant to suppliers offering enterprise GRC software as a service, especially providers able to bring enterprise risk, cyber risk and internal audit management together in one solution. Cadent is looking for a joined-up risk and control framework that supports second-line controls and third-line internal audits, and fits its governance model. Suppliers should be ready to explain implementation approach and timescales, licensing, integration and migration, as well as provide high-level cost information. The solution is expected to support NIS Regulations, the Cyber Assessment Framework and enhanced CAF, NIST 800-53, ISO 27001, Cyber Essentials Plus and MITRE ATT&CK. Providers with experience mapping controls, assurance and reporting to these standards and frameworks are well placed to contribute useful market insight.

How relevant is this notice?

Notice Information

Notice Title

GRC Enterprise & Cyber Risk Management RFI ROM

Notice Description

Cadent is seeking information from the market to understand available Governance, Risk and Compliance (GRC) SaaS solutions that can support both Enterprise Risk Management and Cyber Risk Management, as well as Internal Audit management. The purpose of this RfI / ROM is to explore supplier capability, solution fit, indicative implementation approach and timescales, licensing model, integration options, migration requirements and high-level ROM costs for a single GRC solution. The solution is expected to support the management of risks, controls, assurance activities (2nd line controls and 3rd line internal audits) issues, actions, exceptions, audits and reporting across Enterprise Risk Management and Cyber Risk Management. Cadent is particularly interested in understanding how suppliers can support a joined-up risk and control framework, aligned to Cadent's governance structure and Three Lines Model, while also supporting key standards and regulatory frameworks such as NIS Regulations, CAF / eCAF, NIST 800-53, ISO27001 and Cyber Essentials+ and MITRE ATT&CK.

Planning Information

1. RFI Issue Date: 19 October 2026 2. Supplier Q&A Deadline: 23 October 2026 (Midday) 3. RFI Clarification Release: 30 October 2026 4. RFI Submission Deadline: 04 November 2026 (Midday)

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-078a4c
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/098276-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

66 - Financial and insurance services

CPV Codes

48000000 - Software package and information systems

66517300 - Risk management insurance services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
19 Oct 20261 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
3 Jul 2027 - 3 Jul 2030 3-4 years
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Planning
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
CADENT GAS LIMITED
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
COVENTRY
Postcode
CV7 9JU
Postcode Area
Coventry
Country
England
Major Region (ITL 1)
TLG West Midlands (England)
Basic Region (ITL 2)
TLG1 Herefordshire, Worcestershire and Warwickshire
Small Region (ITL 3)
TLG13 Warwickshire CC
Delivery Location
Not specified
Local Authority
Rugby
Electoral Ward
Revel and Binley Woods
Westminster Constituency
Rugby

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...