Risk Management Tool — UK public procurement notice

Define a single integrated system to manage risks, audit actions, controls and assurance activities aligned to UKSBS governance, ISO27001, CAF and Government Standards.

UK Shared Business Services (UKSBS) is seeking to understand the market for a Risk Management and Assurance system that can support enterprise-wide governance and compliance aligned to ISO27001, CAF and wider Government standards. The intended solution should provide a single, integrated platform to manage risks, controls, audit actions and assurance activities, supporting a Three Lines of Defence model and enabling a clear, consistent view across team, directorate and corporate levels. The system should facilitate risk identification, scoring, escalation and linkage to strategic objectives, alongside the ability to define and monitor risk appetite, including automated identification of breaches.

The solution is also expected to support end-to-end assurance processes, including audit and action tracking, control management, compliance mapping, and evidence handling, with robust reporting and dashboards to support both operational management and Board-level governance. Key considerations include configurability, usability, integration with existing tools, and strong security and access controls. Overall, UKSBS is seeking a scalable and user-friendly solution that reduces manual effort, improves visibility of risks and controls, and strengthens organisational assurance and decision-making