New York State Contract Reporter #2140341

New York State seeks enterprise risk management SaaS and implementation services

New York State’s Office of the State Comptroller is seeking a cloud-based enterprise risk management solution and remote implementation services. - Government buyer: New York State Office of the State Comptroller (OSC), Bureau of Finance, Finance and Administration; based in Albany, New York. - What is requested: A customizable Enterprise Risk Management (ERM) Software-as-a-Service solution and implementation services. No specific solution vendor or OEM is identified. - Solution capabilities: Automate collection of risk-assessment data and executive reporting, conduct risk assessments, record testing results, and incorporate the most recent COSO Framework. The solution must meet the requirements in Attachment A. - Implementation requirements: Proposers must show successful implementation of the proposed solution at two or more organizations with at least 2,000 employees each and provide a project manager with relevant experience. Services are to be performed remotely. - Security: Following conditional award, the contractor must provide evidence of compliance with an accepted security framework, such as FedRAMP, the ISO 27000 series, or SOC 2 Type 2; if such evidence is unavailable, a completed CAIQ must be submitted. - Eligibility and value: The procurement is restricted to eligible New York State-certified MWBE or veterans’ businesses. The stated discretionary procurement range is $150,000 to $1,500,000. - Current tools, not requested products: OSC describes its existing manual process as using Microsoft Excel and Word, an Access database, and Tableau. These are not identified as preferred or proposed solutions. - Term: Ten years, plus one year for implementation. Specific start and end dates and option periods are not stated.

Description

The New York State Office of the State Comptroller seeks a cloud-based Enterprise Risk Management Software-as-a-Service solution and implementation services. The solution must automate risk-assessment data collection and executive reporting, record testing results, integrate the most recent COSO Framework, and meet the requirements in Attachment A. The procurement is limited to New York State businesses certified under Article 15-A of the New York State Executive Law or Article 3 of the New York State Veterans’ Services Law. Services are to be performed remotely; the contract term is ten years plus one year for implementation.

View original listing