Tenders Are Invited For Software Package And Information Systems – Procurement Of A Grc Tool

Software Package And Information Systems – Procurement Of A Grc Tool. The Subject Of The Order Is The Provision And Licensing Of A Grc Tool For An Estimated 34 Universities In The Dh.Nrw Cooperation Community, Which Will Be Made Available By The Contractor As Software-As-A-Service (Saas). In Addition, The Contractor Must Provide The Associated Hosting, Maintenance, Service And Training Services. The Term Of The Contract Is 4 Years. The Contract Is Extended By A Further 4 Years Upon Request By The Client. The Maximum Contract Term Is 8 Years. A Grc Tool Is A Software Solution That Helps Organizations Digitally Manage And Monitor Their Governance, Risk And Compliance Processes. The Grc Tool Must Help To Identify, Assess And Mitigate Risks And Ensure Compliance With Legal Regulations And Technical Standards Such As Iso 27001 And Bsi It-Grundschutz. The Grc Tool Must Contain The Following Modules: - It Security Management (Isms) - Data Protection Management (Dsms) - Risk Management - Business Continuity Management (Bmc). The Grc Tool Must Enable The Universities Involved To Implement Internal Guidelines. The Participating Universities Must Be Able To Communicate With Each Other Via The Grc Tool. At The Beginning Of The Contract Period There Is Onboarding By The Universities. The Contractor Must Create Training Plans For The Group Of Users At The Universities. These Are In Particular The Information Security Officers/Chief Information Security Officers, Business Continuity Officers, Data Protection Coordinators, As Well As Their Deputies And Employees. The Tu Dortmund Has A Total Budget Of A Maximum Of Eur 1.6 Million (Net) For All Services In Accordance With The Service Description For The Contract Term Of 4 Years (Without Extension). The Tu Dortmund Reserves The Right To Exclude Offers That Exceed This Cost Framework From The Procurement Process And To Cancel The Procedure If Only Offers Above The Respective Cost Framework Are Received. Details Can Be Found In The Draft Contract Including Appendices (Appendix 2 To The Aza) And The Service Description (Appendix 1 To The Contract, Appendix 2 To The Aza).