Official UK procurement notice
Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution
Authority: Ministry of Defence (Central government)·Consortium: 2 public authorities
What is being bought
Published requirement descriptionA license agreement for the usage of an integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications
CPV: Compliance software development services · Software development services
The lotProcurement structure
single lot · no lot value publishedLot #1A license agreement for a suite of integrated applications that operate at both…Awarded
A license agreement for a suite of integrated applications that operate at both OFFICIAL and SECRET using on premise facilities as required by the Authority.
Procedure terms & legal framework
From the official record- Procedure method
- Award procedure without prior publication of a call for competition
- Legal basis
- CELEX · 32014L0024 Public Contracts Regulations 2015 (Directive 2014/24/EU)
- Procurement category
- Services
- Notice status
- Awarded without competition
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Direct award (no call for competition)
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Unspecified in notice
- First published
- 4 Feb 2025, 16:02 GMT
- Last source update
- 10 Sept 2025, 10:47 BST
- FTS notice number
2025/S 000-055285- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-04db93Find a Tender
- Why no open competition
- The procurement falls outside the scope of application of the directive
- Published justification
Air Command, part of the UK Ministry of Defence (the Authority), has awarded a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; ‘the Solution‘ will maintain the Authority’s existing Performance And Risk Management Information System (PARMIS) Platform.
In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons.
The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. there is no other economic operator that can provide this capability and meet Air’s delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.
Notice history
1 event · 4 releases on Find a Tender- Buyer details updated5 Feb 2025, 10:24 GMT
Published amendments (2 · 0 deadline changes)
| When | What | Before | After | Shift |
|---|---|---|---|---|
| — | TextExplanation · 7 | — | Air Command, part of the UK Ministry of Defence (the Authority), intends to award a Single Source contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Wo… | |
| — | TextExplanation · IV.1 | The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as… | Air Command, part of the UK Ministry of Defence (the Authority), intends to award a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applica… |
The text to be corrected in the original notice at VII.1.2 above also replaces the text at VII.1.2 in the Corrigendum with reference number 2025/S 000-003768. This notice is not a request for expressions of interest so please do not apply to be invited to tender. This notice advises that the Authority has decided to negotiate a contract with the named supplier on a single source basis, and is publ…
1 amendment published without a description.
Routine re-releases (4)
- 2025-02: 1 release · 4 Feb 2025
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| RiskonnectProvision of a Governance, Risk Management and Compliance (GRC) SoftwareSubcontracting: declared | £6,672,000 † | — | Awarded |
| RiskonnectProvision of an Enterprise Governance, Risk Management and Compliance Solution | £7,208,697 † | — | Awarded |
Contracts
Provision of an Enterprise Governance, Risk Management and Compliance Solution · Riskonnect
- Signed
- 23 Jul 2025
- Value
- £7,208,697
- Status
- active
Provision of a Governance, Risk Management and Compliance (GRC) Software · Riskonnect
- Signed
- 4 Feb 2025
- Value
- £6,672,000
- Status
- active
Bid statistics published by the authority
| Bids | SME | VCSE | Valid bid range |
|---|---|---|---|
| 1bids | — | — | — |
Contracting authority & participating public bodies
2 public bodies on the noticeConsortium members and other public bodies
- Air CommercialContracting authorityMinistry or any other national or federal authority, including their regional or local subdivisionsDefence
Bidders & participating suppliers
2 commercial parties on the notice- Riskonnect LimitedAwarded supplier
- Riskonnect LimitedAwarded supplier
Official documents & specifications
Official links; attachments are not copiedNo document links were published on the notice.