--- title: "A SAP Governance, Risk and Compliance (GRC) Solution Reference number: WA02642" ocid: "ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c" markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c.md" json_url: "https://d3tenders.com/contract/ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c.json" source: "Contracts Finder" current_stage: "Planning" buyer: "SELLAFIELD" published: "2021-02-18" --- # A SAP Governance, Risk and Compliance (GRC) Solution Reference number: WA02642 Buyer: SELLAFIELD Current stage: Planning OCID: ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c) [Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c.json) ## Summary The procurement process pertains to Sellafield, which is seeking a SAP Governance, Risk and Compliance (GRC) Solution under reference number WA02642. This is classified under the software package and information systems industry and is currently at the planning stage. Interested parties should note that the engagement end date is set for 3rd March 2021. The procurement is focused on enhancing compliance and risk management within Sellafield’s SAP ERP system and involves a tendering process. This tender presents a significant opportunity for businesses involved in software programming, consultancy services, and specifically those with expertise in governance, risk management, and compliance solutions. Companies capable of providing robust GRC technology and support will be particularly well-suited to compete. As Sellafield aims to automate and streamline their compliance processes, firms that can demonstrate innovative solutions and a strong understanding of regulatory frameworks, such as GDPR, may find this an advantageous market to enter. ## Notice The scope of this requirement is for a GRC (governance, risk management and compliance) solution for SAP ERP System to help manage compliance and remove/mitigate risks on an ongoing basis. The current process for SAP User Access management, Human Capital Management (HCM) and non-HCM Segregation of Duties (SoD), Emergency Access Management and Role Management are manual paper-based processes managed by BUC's (Business User Controllers) and the SAP Competency Centre. Checking for compliance and segregation of duties is very limited and the business does not have the skills to maintain the matrices at this level on a manual basis due to the complexity of SAP Authorisations. Additional information: BACKGROUND - LANDSCAPE Sellafield has been nearly 80 years in the making. A pioneer for the UK's nuclear industry, it supported national defence, generated electricity for nearly half a century, and developed the ability to safely manage nuclear waste. Each chapter of Sellafield's history delivered great benefit for the country while creating a complex nuclear clean-up challenge for which there are no blueprints. Today, Sellafield covers 6 square kilometres and is home to more than 200 nuclear facilities and the largest inventory of untreated nuclear waste in the world. From cleaning-up the country's highest nuclear risks and hazards to safeguarding nuclear fuel, materials and waste, our mission is nationally important. Our purpose is to keep Sellafield safe and secure, cleaning-up the site to a defined end state. The purpose of this PIN is to understand the capability and capacity of the SAP GRC market. This information will then be used to help determine Sellafield's overall approach and any future acquisition strategy in relation to SAP GRC. Interested parties are requested to provide information on how your Company could provide part or all of the technology required. The tool will enable Sellafield to: - manage regulations and compliance and remove or mitigate any risk in managing key operations. - develop an integrated and centralised approach to GRC which makes the most of automations to ensure that the cost of managing a GRC solution is reduced whilst significantly improving operational effectiveness and value. - demonstrate resilience in managing overall governance, risk management and compliance with regulations, for example, GDPR. Interested parties should refer to the Addition Information section VI.3) in this notice which details the response requirements of this PIN. The priority areas are: * Access Request Management * Segregation of Duties * User Access Reviews * User Behaviour Profiling * Role Management * Emergency Access * Licence Optimisation/Compliance * GDPR Compliance * Audit Compliance * Monitoring/Analytics * Future proofing for S/4 HANA for role migration/testing ## Key Details | Field | Value | | --- | --- | | Publication source | Contracts Finder | | Latest notice | https://www.contractsfinder.service.gov.uk/Notice/57828c6a-65e5-4cd2-ba3b-be6716817742 | | Notice type | Market Engagement Notice | | Procurement type | Standard | | Procurement category | Not specified | | Procurement method | Not Specified | | Procurement method details | Not specified | | Tender suitability | Not specified | | Awardee scale | Not specified | | All stages | Planning | ## Dates | Field | Value | | --- | --- | | Publication date | 18 Feb 2021 | | Submission deadline | Not specified | | Future notice date | 3 Mar 2021 | | Award date | Not specified | | Contract period | Not specified | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | Not specified | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Planning | | Lots status | Not specified | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | SELLAFIELD | | Locality | SEASCALE | | Post town | Carlisle | | Postcode | CA20 1PG | | Country | England | | ITL 1 | TLD North West (England) | | ITL 2 | TLD1 Cumbria | | ITL 3 | TLD13 Cumberland | | Local authority | Cumberland | | Electoral ward | Gosforth | | Westminster constituency | Whitehaven and Workington | | Delivery location | TLD North West (England) | ## CPV Codes ### Divisions - 48 - Software package and information systems - 72 - IT services: consulting, software development, Internet and support ### Codes - 48000000 - Software package and information systems - 72200000 - Software programming and consultancy services ## Release History - 18 Feb 2021 at 08:05 - Planning - Market Engagement Notice - https://www.contractsfinder.service.gov.uk/Notice/57828c6a-65e5-4cd2-ba3b-be6716817742 ## Documents - https://www.contractsfinder.service.gov.uk/Notice/57828c6a-65e5-4cd2-ba3b-be6716817742 18th February 2021 - Early engagement notice on Contracts Finder ## Notice URLs - https://www.gov.uk/government/case-studies/shared-services-alliance-ssa-for-nuclear-decommissioning-estate ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-59d2f0a3-7f1a-45c4-8ff5-2e17687f388c.json.