Governance, Risk and Compliance Software

The buyer requires a comprehensive Governance, Risk, and Compliance (GRC) software platform for use across its agency environment. The vendor must provide a scalable system that supports a hierarchical organizational model, asset assignments, risk lifecycle management, and control-based compliance assessments. Key functional capabilities include risk and control inheritance, automated workflows, simplified assessment interfaces, collaboration tools, built-in dashboards, and external risk integration. Additionally, the software must support multi-factor authentication, role-based access control, and operation across multiple campuses with a small administrative team. To eligible to bid, vendors must be an onshore USA organization and maintain a SOC 2 Type II or equivalent attestation. The contractor will perform the work offsite over a three-year contract period. The buyer requests proposals to determine the budget. Bidders must submit all questions no later than August 31, 2026.