Governance, Risk and Compliance Platform System Implementation

The City of Aurora seeks to pre-qualify providers to implement a multi-tenant, Software as a Service Governance, Risk, and Compliance (GRC) platform system to replace the Information Security Office's existing OneTrust system. The required scope includes offsite performance providing risk register capabilities, assessment functionality, control libraries, issue resolution tracking, governance workflows, dark web/OSINT monitoring, and scalable third-party risk management capabilities. Only onshore, USA organizations are eligible to bid, while subcontractors and material suppliers should not submit responses. Bidders must submit questions by October 02, 2026. Bidders must electronically submit Statements of Qualifications up to 50 pages through the Rocky Mountain E-Purchasing System (BidNet) by 2:00 p.m. local time on October 14, 2026. A City Selection Committee evaluates proposals out of 100 total points, allocating 20 points specifically to Project Specific Qualifications. The city seeks proposal pricing, does not state a set budget, and will not award a contract directly from this solicitation.