Third-Party Risk Management Platform

The agency is seeking a secure, Software as a Service third-party risk management platform to assess and monitor its business partners. The platform must accommodate a fluctuating number of business partners and users over the contract term while providing a secure portal for partners to submit assessments and upload documents. The system must facilitate API integrations with external systems like procurement software, send notifications for expiring documents or contracts, and support the offboarding of partners at the end of their contracts. The agency requires the platform to handle both information technology and operational technology supplier assessments in a unified way. The solution must support multi-tenant or multi-departmental environments, such as information and communications technology, faculties, and research. It must also automatically send out assessments based on initial screening results and leverage fuzzy match ratings. Bidders must detail the firmographic information the platform leverages for segmenting and assessing vendors. Bidders must also explain how the platform reacts to threat intelligence feeds to proactively create risk alerts, and how fuzzy match ratings are utilized in screening. Performance of the work will be conducted offsite, and eligible bidders must be onshore United States organizations. The agency is looking for budget proposals to determine the cost of the project. Bidders must submit any questions regarding this opportunity no later than June 05, 2026. Responses to the solicitation can be submitted digitally via email or online.