Published date: 1 February 2024
Closed opportunity - This means that the contract is currently closed. The buying department may be considering suppliers that have already applied, or no suitable offers were made.
Contract summary
Industry
IT software package - 48517000
Location of contract
E20 1JN
Value of contract
£1,000,000 to £3,500,000
Procurement reference
CF-0007700D8d000009sg5IEAQ
Published date
1 February 2024
Closing date
4 March 2024
Closing time
12pm
Contract start date
1 September 2024
Contract end date
31 August 2029
Contract type
Supply contract
Procedure type
Other
Contract is suitable for SMEs?
No
Contract is suitable for VCSEs?
No
Description
The FCA is establishing a contractual mechanism to implement a Risk, Internal Audit and Compliance Solution to the FCA for a period of three years starting from 1 September 2024 with an option to extend by two further periods of 12 months each (maximum term 5 years).
As a fully independent subsidiary of the FCA, the PSR operates to a shared service agreement, but each retains full data segregation. Any proposed solution will be required to maintain this segregation.
The system will support the further embedding of the Risk Management Frameworks that are operated by the FCA and PSR respectively, enabling greater levels of risk maturity across both organisations and ensuring efficient and effective risk-conscious decision making and prioritisation.
Risk Management plays an essential role in helping to deliver on our Strategy and statutory and operational objectives. It does this by helping to ensure we are operating in an effective and efficient risk-based manner in identifying and delivering the timely interventions to appropriately identify, prevent, mitigate, manage, influence and report on actual and potential Risks of Harm.
The current risk system is a commercial off the shelf (COTS), software as a service (SaaS) platform. This has been configured to support, as examples, the FCA's risk of harm and own risk taxonomies and scoring methodologies, to automate aspects of the FCA's Risk and Control Self-Assessment (RCSA) process; Risk Event Management process; risk acceptance and various risk and assurance reviews that are conducted by 2LOD. Additionally, it includes a small number of cross-cutting Risks of Harm.
The current Internal Audit (IA) system is used as a workflow tool to manage the activities associated with internal audits, including findings and actions. This is also a COTS SaaS, with a component hosted on desktop.
Both systems are functionally similar platforms and classified as 'Governance, Risk and Compliance' software tools. Moving to a single platform for all risk and audit information will support the consolidation of our IT estate.
A unified platform is envisaged to benefit day to day users, providing a clear view of the risks and controls they manage, linking the outcomes of IA reviews to wider risk management activities. In addition, this would provide stakeholders with an improved view of risk exposures and resultant mitigations by connecting the data to enable more effective and efficient decision making.
The system will be required to support the FCA's roadmap for critical risk management tools and processes and must therefore be able to support existing (and new) capabilities that have not previously been automated, such as Compliance (i.e., policy management and the implementation of a standardised control library) and Key Risk Indicator management.
About the buyer
Contact name
Phil Lamacraft
Address
12 Endeavour Square
London
E20 1JN
United Kingdom
Telephone
0207 066 1000
Share this notice
Closing: 4 March 2024, 12pm
All content is available under the
