Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support – Provision, Implementation And Operation Of A System To Support Governance, Risk And Compliance Management Processes Grc Tool As A Saas Solution

It Services: Consulting, Software Development, Internet And Support – Provision, Implementation And Operation Of A System To Support Governance, Risk And Compliance Management Processes Grc Tool As A Saas Solution. The Subject Of The Tender Is The Provision, Implementation And Operation Of A Web-Based System (Software-As-A-Service, Saas) To Support And Control The Clients Governance, Risk And Compliance Processes. The System Is Intended To Support In Particular The Grc Functions In The Areas Of Central Outsourcing Management (Zam), Business Continuity Management (Bcm), Information Security Management (Ism) As Well As In The Context Of Risk Control In The Area Of ​​Non-Financial Risk (Nfr) And Enable Consistent And Traceable Processing Of These Functions. The Implementation Includes The Functional And Technical Introduction Of The System Into The Clients Existing System Landscape. This Includes Integrating Existing Systems And Data Sources As Well As Setting Up And Coordinating The Required Data Streams. This Includes In Particular The Definition Of Data Models, Interface Formats And The Definition Of Integration Mechanisms (E.G. Api-Based Connection Or Structured Data Imports), Including The Coordination Of Data Frequencies, Responsibilities And Error Handling Processes. Data Is Currently Provided Largely Via Structured Data Imports (E.G. File Upload). At The Same Time, The System Must Fundamentally Also Offer The Possibility Of Connection Via Standardized Api-Based Interfaces. This Applies In Particular To Systems For Managing Processes And Ict Systems, As Well As Systems For Managing Ict Assets And Configuration Data. Integration Must Also Be Planned In The Future For Systems That Do Not Currently Have Interface Capability. Common Standards (E.G. Rest-Based Interfaces Using Https) Must Be Supported For Technical Integration; The Processing Of Structured Data Imports (E.G. Csv, Excel) Must Be Validated, Clearly Logged And Repeatable. In Particular, A Prioritized, Bidirectional Integration Of The Cmdb Servicenow Is Planned, While Other Systems Are Initially To Be Connected Via Manual Data Provision (Upload/Download). The Grc System Offered Must Be Able To Connect The Clients Existing Data-Storing Systems As Data Sources And Make Their Information Usable In The Grc Context. It May Not Be Necessary To Replace These Systems In Order To Use The Grc System. The Grc System Is Intended To Act As A Central Control And Evaluation Platform For Grc-Relevant Information. Furthermore, The System Must Be Able To Map Relationships Between Different Data Objects (E.G. Ict Assets, Processes, Risks, Service Providers) On The System Side And Make Them Usable For Evaluations, Analyzes And Regulatory Evidence. The Requirements Are Summarized In The Following Sections. A Complete And Detailed List Of All Requirements Can Be Found Here