Source: https://tendernation.io/opportunities/01a13c70-1a3d-70cb-b06d-24271d5ccd35/a-sap-governance-risk-and-compliance-grc-solution-reference-number-wa02642 pending GB open procedure # A SAP Governance, Risk and Compliance (GRC) Solution Reference number: WA02642 [Sellafield](https://tendernation.io/buyers/sellafield) Estimated value Not stated Published 18 Feb 2021 Deadline Rolling deadline ## Who can bid - Open procedure Anyone can submit a full tender; there is no shortlisting stage. ## About this tender The scope of this requirement is for a GRC (governance, risk management and compliance) solution for SAP ERP System to help manage compliance and remove/mitigate risks on an ongoing basis. The current process for SAP User Access management, Human Capital Management (HCM) and non-HCM Segregation of Duties (SoD), Emergency Access Management and Role Management are manual paper-based processes managed by BUC's (Business User Controllers) and the SAP Competency Centre. Checking for compliance and segregation of duties is very limited and the business does not have the skills to maintain the matrices at this level on a manual basis due to the complexity of SAP Authorisations. ### Additional information: BACKGROUND - LANDSCAPE Sellafield has been nearly 80 years in the making. A pioneer for the UK's nuclear industry, it supported national defence, generated electricity for nearly half a century, and developed the ability to safely manage nuclear waste. Each chapter of Sellafield's history delivered great benefit for the country while creating a complex nuclear clean-up challenge for which there are no blueprints. Today, Sellafield covers 6 square kilometres and is home to more than 200 nuclear facilities and the largest inventory of untreated nuclear waste in the world. From cleaning-up the country's highest nuclear risks and hazards to safeguarding nuclear fuel, materials and waste, our mission is nationally important. Our purpose is to keep Sellafield safe and secure, cleaning-up the site to a defined end state. The purpose of this PIN is to understand the capability and capacity of the SAP GRC market. This information will then be used to help determine Sellafield's overall approach and any future acquisition strategy in relation to SAP GRC. Interested parties are requested to provide information on how your Company could provide part or all of the technology required. The tool will enable Sellafield to: - manage regulations and compliance and remove or mitigate any risk in managing key operations. - develop an integrated and centralised approach to GRC which makes the most of automations to ensure that the cost of managing a GRC solution is reduced whilst significantly improving operational effectiveness and value. - demonstrate resilience in managing overall governance, risk management and compliance with regulations, for example, GDPR. Interested parties should refer to the Addition Information section VI.3) in this notice which details the response requirements of this PIN. The priority areas are: • Access Request Management • Segregation of Duties • User Access Reviews • User Behaviour Profiling • Role Management • Emergency Access • Licence Optimisation/Compliance • GDPR Compliance • Audit Compliance • Monitoring/Analytics • Future proofing for S/4 HANA for role migration/testing Read full description ## CPV classification Software package and information systems Source Contracts Finder (UK) [View official notice](https://www.contractsfinder.service.gov.uk/notice/59d2f0a3-7f1a-45c4-8ff5-2e17687f388c) Never miss a tender like this again Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start. [Track tenders free](https://tendernation.io/register) [Buyer profile Sellafield: past awards and live tenders](https://tendernation.io/buyers/sellafield) [Sector More Software packages & information systems tenders](https://tendernation.io/sectors/software-information-systems) ## More tenders like this [Preliminary Market Engagement - Corporate Enterprise Resource Planning (ERP) · North East Lincolnshire Borough Council · 21 days left · 9 Nov 2026](https://tendernation.io/opportunities/01a15410-bf5e-72d1-8225-fbabeaba595f/preliminary-market-engagement-corporate-enterprise-resource-planning-erp) [Servers – Dostawa serwerów do klastra wirtualizacyjnego · Politechnika Rzeszowska · 2 days left · 21 Oct 2026](https://tendernation.io/opportunities/01a15183-2e23-7066-ba48-4fc2a9243b50/poland-servers-dostawa-serwerow-do-klastra-wirtualizacyjnego) [License management software package – Dostawa licencji bezpieczeństwa do Systemu DNS · Poczta Polska S.A. · 15 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-20fa-7396-87e7-40ce84cb0f4d/poland-license-management-software-package-dostawa-licencji-bezpieczenstwa-d) [Security software package – Pořízení a implementace integrovaného řešení EDR/XDR a SIEM · Fakultní nemocnice Plzeň · 30 days left · 18 Nov 2026](https://tendernation.io/opportunities/01a15183-1e5d-73ea-989e-b9c221c4c490/czechia-security-software-package-porizeni-a-implementace-integrovaneho-rese) [Computer servers – „Dostawa serwerów komputerowych wraz z dedykowanymi kartami graficznymi dla Copernicus PL Sp. z o.o.” · Copernicus Podmiot Leczniczy Spółka Z Ograniczoną Odpowiedzialnością · 3 days left · 22 Oct 2026](https://tendernation.io/opportunities/01a15183-08e5-7339-9a05-be1adf5996b5/poland-computer-servers-dostawa-serwerow-komputerowych-wraz-z-dedykowanymi) [Software package and information systems – Datenerfassungssystem · Dataport AöR · 15 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-43c5-7007-89f5-0ea2d1525f27/germany-software-package-and-information-systems-datenerfassungssystem)