Official UK procurement notice
ID 3871582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution
Authority: Department of Agriculture, Environment and Rural Affairs (Central government)
What is being bought
Published requirement descriptionDAERA Digital Services Division has procured a contract to deliver a Governance, Risk and Compliance (GRC) Solution with modules to support automating and socialising the cyber risk register amongst the risk stakeholders which is driving up the proactive management of these risks. DAERA require a modification of this contract to complete additional works to enable the department to maintain compliance with ISO27001 requirements for certification. The modification value required is £50,000
CPV: IT services: consulting, software development, Internet and support · Software package and information systems
The lotProcurement structure
single lot · no lot value publishedProcedure terms & legal framework
From the official record- Procedure method
- Negotiated without publication of a contract notice
- Legal basis
- CELEX · 32014L0024 Public Contracts Regulations 2015 (Directive 2014/24/EU)
- Procurement category
- Services
- Notice status
- Awarded
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Competitive procedure
- GPA / WTO covered
- Yes (GPA)
- Recurring procurement
- Unspecified in notice
- First published
- 15 Nov 2022, 08:42 GMT
- Last source update
- 12 Jan 2024, 14:36 GMT
- FTS notice number
2024/S 000-001112- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-038465Find a Tender
- Why no open competition
The works, supplies or services can be provided only by a particular economic operator due to absence of competition for technical reasons
- Published justification
DAERA Digital Services Division has procured a contract to deliver a Governance, Risk and Compliance (GRC) Solution with modules to support automating and socialising the cyber risk register amongst the risk stakeholders which is driving up the proactive management of these risks. DAERA require a modification of this contract to complete additional works to enable the department to maintain compliance with ISO27001 requirements for certification. The modification value required is £50,000
Regulation 72(1)(b) Additional works, services or supplies “have become necessary” and were not included in the initial procurement and a change of supplier would involve substantial inconvenience/duplication of costs - provided the change does not exceed 50% of the value of the original contract.
- Review procedure
CPD will comply with the Public Contracts Regulations 2015 (as amended) and, where appropriate, will incorporate a standstill period (i.e. a minimum of 10 calendar days) at the point information on the award of contract is communicated to tenderers. That notification will provide full information on the award decision. This provides time for the unsuccessful tenderers to challenge the award decision before the contract is entered into
Notice history
4 releases on Find a TenderPublished amendments (1 · 0 deadline changes)
| When | What | Before | After | Shift |
|---|---|---|---|---|
| — | TextII.1.1) | ID 3781582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution | ID 3871582 - DAERA - Procurement of a Governance, Risk and Compliance (GRC) Solution |
1 amendment published without a description.
Routine re-releases (4)
- 2022-11: 1 release · 15 Nov 2022
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| INFORMATION RISK MANAGEMENT LIMITEDSME | £225,000 † | — | Awarded |
| INFORMATION RISK MANAGEMENT LIMITEDSME | £150,000 † | — | Awarded |
| INFORMATION RISK MANAGEMENT LIMITEDSME | £225,000 † | — | Awarded |
Contracts
Contract 001112-2024-1 · INFORMATION RISK MANAGEMENT LIMITEDSME
- Signed
- 11 Feb 2022
- Value
- £225,000
- Status
- active
Contract 032296-2022-1 · INFORMATION RISK MANAGEMENT LIMITEDSME
- Signed
- 11 Feb 2022
- Value
- £150,000
- Status
- active
Contract 034530-2022-1-1 · INFORMATION RISK MANAGEMENT LIMITEDSME
- Signed
- 11 Feb 2022
- Value
- £225,000
- Status
- active
- Change The contract has been modified to allow DAERA to purchase two additional modules (IT Security and Vendor modules) that are required to support DAERA’s ISO 27001 certification., Need for additional works, services or supplies by the original contractor/concessionaire: Additional works have become necessary, therefore DAERA will rely on regulation 72(1)(b) –Additional works, services or supplies “have become necessary” and were not included in the initial procurement and a change of supplier would not be practicable (for economic, technical or interoperability reasons) and would involve substantial inconvenience/duplication of costs.
Contracting authority & participating public bodies
Dispute resolution & review bodies
- The UK does not have any special review body with responsibility for appeal/mediation procedures in public procurement competitions. Instead; any challenges are dealt with by the High Court, Commercial Division, to which proceedings may be issued regarding alleged breaches of the PCR 2015.Review body
- The UK does not have any such bodies with responsibility for appeal/mediation procedures. Instead; any challenges are dealt with by the High Court, Commercial Division, to which proceedings may be issued regarding alleged breaches of the PCR 2015 as amended.Review body
Bidders & participating suppliers
3 commercial parties on the notice- INFORMATION RISK MANAGEMENT LIMITEDAwarded supplier
- Information Risk Management LtdAwarded supplier
- Information Risk Management LtdAwarded supplier
Official documents & specifications
Official links; attachments are not copiedNo document links were published on the notice.