Governance, Compliance and Risk Software

GMCA is awarding a contract for a fully managed SaaS solution to support Greater Manchester Police in managing its obligations in relation to governance, compliance and risk.

The solution will form an integrated system to reconcile information, verify accuracy and compile updates, reducing the reliance on manual processing and standalone spreadsheets.

The requirements of the solution are:

• Highly configurable.
• Ability to link finding/controls/risks.
• Data migration of the mandated National Institute of standard and technology (NIST) controls) and data migration of our Security Assessment for Policing (SyAP) controls with the ability to link to risk (of which there are over 100 detailed controls we need to report on.
• Centralised risk register with ownership, scoring and lifecycle management.
• Reporting at all levels.
• Reduce manual effort associated with evidence collection, control, tracking and reporting.
• Data residency in UK.

Whilst the contracting Authority is the Greater Manchester Combined Authority, this contract will be procured and managed by the Greater Manchester Police.