Governance, Risk and Compliance (GRC) SaaS Solution Request for Information

Cadent is seeking information from qualified suppliers regarding Governance, Risk and Compliance (GRC) SaaS solutions that integrate Enterprise Risk Management, Cyber Risk Management, and Internal Audit capabilities. The requested information should address: solution fit for managing risks, controls, assurance activities (second and third line controls), issues, actions, exceptions, audits and reporting; supplier implementation approach and timescales; licensing models; integration and migration options; and indicative costs. Cadent requires a single unified platform that supports a joined-up risk and control framework aligned to its governance structure and Three Lines Model, while meeting key regulatory standards including NIS Regulations, CAF/eCAF, NIST 800-53, ISO 27001, Cyber Essentials+, and MITRE ATT&CK. This is a Request for Information (RfI) and Rough Order of Magnitude (ROM) exercise to evaluate available market solutions.