---
title: "Risk Management Tool"
ocid: "ocds-h6vhtk-077939"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-077939"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-077939.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-077939.json"
source: "Find A Tender Service"
current_stage: "Planning"
buyer: "UK SHARED BUSINESS SERVICES LIMITED"
published: "2026-09-24"
---

# Risk Management Tool

Buyer: UK SHARED BUSINESS SERVICES LIMITED  
Current stage: Planning  
OCID: ocds-h6vhtk-077939

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-077939)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-077939.json)

## Summary

UK Shared Business Services Ltd intends to procure a risk management and assurance system for organisation-wide governance and compliance. The requirement is for a single integrated software platform to manage risks, controls, audit actions and assurance activities, supporting a Three Lines of Defence model and consistent oversight at team, directorate and corporate levels. Functions are expected to include risk identification, scoring, escalation and links to strategic objectives; setting and monitoring risk appetite, with automated breach identification; assurance workflows, audit and action tracking, control management, compliance mapping and evidence handling. Reporting and dashboards should support operational management and Board-level governance. The system is intended to reduce manual work and improve visibility and decision-making. The procurement is for software and related computer services, for use by UKSBS in the United Kingdom.

This process is at the planning stage: UKSBS has stated an intention to procure and is conducting pre-market engagement to understand suppliers’ capability, capacity and appetite. It expects to publish a future procurement notice by 28 February 2027. The buyer’s indicative contract period is 6 April 2027 to 5 April 2031, with a possible extension to 4 April 2032. The requirement is arranged as one lot. The lot is identified as suitable for small and medium-sized businesses and voluntary, community and social enterprises. The planning information does not set out a procurement procedure, evaluation criteria or contract value. These are not tender deadlines: the stated date for feedback on the market-engagement questions is 14 October 2026.

This requirement is likely to suit suppliers with an established, configurable risk, audit and assurance platform, and the ability to support its implementation and integration with UKSBS’s existing tools. Relevant strengths include enterprise-scale risk and control management, workflow automation, evidence handling, compliance mapping, escalation and risk-appetite monitoring, with clear dashboards for both operational users and senior governance. Suppliers should be prepared to demonstrate how their system supports ISO 27001, the Cyber Assessment Framework and wider Government standards, as well as strong security and access controls. Ease of use and scalability are explicit priorities. UKSBS is seeking a consistent view across teams, directorates and corporate governance, so providers able to handle varied organisational needs while reducing manual effort are well placed to engage during market preparation.

## Notice

Define a single integrated system to manage risks, audit actions, controls and assurance activities aligned to UKSBS governance, ISO27001, CAF and Government Standards. UK Shared Business Services (UKSBS) is seeking to understand the market for a Risk Management and Assurance system that can support enterprise-wide governance and compliance aligned to ISO27001, CAF and wider Government standards. The intended solution should provide a single, integrated platform to manage risks, controls, audit actions and assurance activities, supporting a Three Lines of Defence model and enabling a clear, consistent view across team, directorate and corporate levels. The system should facilitate risk identification, scoring, escalation and linkage to strategic objectives, alongside the ability to define and monitor risk appetite, including automated identification of breaches. The solution is also expected to support end-to-end assurance processes, including audit and action tracking, control management, compliance mapping, and evidence handling, with robust reporting and dashboards to support both operational management and Board-level governance. Key considerations include configurability, usability, integration with existing tools, and strong security and access controls. Overall, UKSBS is seeking a scalable and user-friendly solution that reduces manual effort, improves visibility of risks and controls, and strengthens organisational assurance and decision-making

### Planning Information

The Contracting Authority UK Shared Business Services - would like to conduct pre-market engagement.
As part of this information gathering exercise, we have developed a series of questions to ascertain the capability, the capacity and the appetite of the current market and would welcome your responses.
Please see below link which will take you to a form with a list of pre market engagement questions. If you could please provide feedback by Wednesday 14th October 2026 this will be much appreciated.
https://forms.cloud.microsoft/e/Fe7Z2VRCbx
To Access the Specification which is the current version of the Specification, which will provide further details on the requirement, please contact ddatprocurement@uksbs.co.uk, referencing DDaT26328 & Risk Management and Assurance System pre market engagement so that we can issue you the Document.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/090424-2026 |
| Notice type | UK2 - Preliminary Market Engagement Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Not Specified |
| Procurement method details | Not specified |
| Tender suitability | SME, VCSE |
| Awardee scale | Not specified |
| All stages | Planning |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 24 Sep 2026 |
| Submission deadline | Not specified |
| Future notice date | 28 Feb 2027 |
| Award date | Not specified |
| Contract period | 6 Apr 2027 - 6 Apr 2031 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Planning |
| Lots status | Planning |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | UK SHARED BUSINESS SERVICES LIMITED |
| Locality | SWINDON |
| Postcode area | Swindon |
| Postcode | SN2 1FF |
| Country | England |
| ITL 1 | TLK South West (England) |
| ITL 2 | TLK7 Gloucestershire and Wiltshire |
| ITL 3 | TLK71 Swindon |
| Local authority | Swindon |
| Electoral ward | Rodbourne Cheney |
| Westminster constituency | Swindon North |
| Delivery location | Not specified |

## CPV Codes

### Divisions

- 48 - Software package and information systems
- 72 - IT services: consulting, software development, Internet and support

### Codes

- 48100000 - Industry specific software package
- 48732000 - Data security software package
- 72590000 - Computer-related professional services

## Release History

- 24 Sep 2026 at 10:05 - Planning - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/090424-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/090424-2026
  24th September 2026 - Preliminary market engagement notice on Find a Tender

## Notice URLs

- https://forms.cloud.microsoft/e/Fe7Z2VRCbx
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-077939. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-077939.json.