Massport #6866(A)

Massport seeks cloud-based internal audit management software with GRC expansion options

The Massachusetts Port Authority (Massport) Internal Audit Department is seeking proposals for a secure, cloud-based internal audit management software solution, with the option to expand into Governance, Risk, and Compliance (GRC) modules in the future. - Government Buyer: - Massachusetts Port Authority (Massport), Internal Audit Department - Products/Services Requested: - Commercial off-the-shelf (COTS) internal audit management software - Must be cloud-based, FedRAMP Authorized, and support 8-15 initial users - Key features: audit planning, risk assessment, electronic workpapers, management action tracking, reporting, dashboards, and Microsoft 365 integration - Optional modular GRC expansion modules: - Enterprise Risk Management, Compliance Management, Controls Management, Policy Management, Third-Party Risk Management, Case/Investigation Management - All modules must operate on the same platform and data/security model - Professional services: - Implementation, configuration, data migration, integration, testing, training, warranty, and ongoing support - Unique/Notable Requirements: - Strict FedRAMP cloud hosting and cybersecurity compliance - Strong data ownership and export rights for Massport - Robust integration with Microsoft 365 - Solution must be scalable and support future GRC expansion - No specific OEMs or vendors are named in the solicitation.

Description

The Massachusetts Port Authority is seeking proposals for a commercial off-the-shelf internal audit management software with optional Governance, Risk, and Compliance (GRC) expansion capabilities. The software must be cloud-based, FedRAMP authorized, integrate with Microsoft 365, and support 8-15 users initially with scalability options. The scope includes licensing, hosting, configuration, implementation, data migration, support, training, and warranty for a 5-year term with renewal options. The solution should improve audit lifecycle management, reporting, and management action tracking.

View original listing