Source: https://tendernation.io/opportunities/01a13c95-07c4-7375-9af3-c556e875283a/homes-england-automated-risk-management-system-rm155712-g-cloud-call-off

awarded GB direct award procedure Suitable for SMEs

# Homes England - Automated Risk Management System (RM1557.12 G-Cloud call off)

[Homes England (the name adopted by the Homes and Communities Agency)](https://tendernation.io/buyers/homes-england-the-name-adopted-by-the-homes-and-communities-agency)

Estimated value

£120,000

Published

7 Jun 2022

Deadline

Closed

6 May 2022

## Who can bid

- Buyer says suitable for SMEs

    The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid.
- Buyer says suitable for VCSEs

    The buyer ticked “suitable for voluntary, community and social enterprises” on the notice.

[More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses)

## About this tender

Homes England require the following:

Automated risk management system consisting of the following modules:

### Risk Manager

Controls (Compliance) Manager

### Incident Manager

and related support services in accordance with the relevant

service descriptions including 24 days for implementation and

an optional 20 days on a call off basis for further development

and or implementation requirements and as further set out

below:

Risk:

Risk Manager standard features:

â&#128;¢ Risk Capture with Inherent, current and target risk scoring

â&#128;¢ Risk approval and closure workflow

â&#128;¢ Multi-level risk taxonomy (managed by Buyer administrative staff)

â&#128;¢ Multi-level Risk register hierarchy (managed by Buyer administrative staff)

â&#128;¢ Key Risk indicator management

â&#128;¢ Risks linked to controls in the controls framework

â&#128;¢ Risk Events capture

â&#128;¢ Mitigation action tracking (utilising your existing action tracking module)

â&#128;¢ Process mapping tool with ability to overlay risks and other content

Buyer specific features:

â&#128;¢ Ability to score risks on multiple dimensions. E.gdifferent weightings to different risk score factors, and possibly utilising inputs from Control scoring (Requires clarification of HE's methodology - may not be a day 1 requirement)

â&#128;¢ Strategic objectives changed to 'demand drivers' with ability to copy this categorisation through to linked controls

â&#128;¢ Risk events added (possibly merged with data breach reporting in IAM depending on agreement with the HE DP

team)

Controls:

Controls (Compliance ) Manager standard features:

â&#128;¢ Controls Framework to model Buyer control

environment, including:

â&#128;¢ Controls, linked to Organisation, Process, Sub process, risk, entity.

â&#128;¢ Controls linked to control objectives management

â&#128;¢ Change control

â&#128;¢ Control confirmation tasks

â&#128;¢ Control design effectiveness testing by first line, with 2nd line assurance review

â&#128;¢ Control operating effectiveness testing by first line with 2nd line assurance review

â&#128;¢ Control testing deficiency management

â&#128;¢ Action management (integrated with the existing action

module)

â&#128;¢ Self-serve reference data management (e.g. for process, sub process, entity and org structure, user permissions etc)

â&#128;¢ Ability to manage / test controls independently of Risk linkages

Buyer specific features:

â&#128;¢ Ability to mark a control test status as a Partial Pass (where mitigations are in place that mean the control is not strictly a fail. Note this may also be able to be supported via a

'pass' with mitigating actions attached

â&#128;¢ Ability to scope tests by 'demand driver' (inherited from

### Risk)

â&#128;¢ Specific reporting dashboards (requirements to be Future Features (when Buyer requirements are known):

â&#128;¢ Ability to score controls through the testing process and use this to compare against risk scores - the aim is to surface controls that may not be proportionate to the risk they

are controlling

Incident Manager:

Incident Manager centralises the recording, resolution and reporting of incidents / problems across your organisation

Read full description

## CPV classification

Software package and information systems

Source

Contracts Finder (UK)

[View official notice](https://www.contractsfinder.service.gov.uk/notice/6ab72000-fef1-4251-8585-1b749e2b7778)

Never miss a tender like this again

Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start.

[Track tenders free](https://tendernation.io/register)

[Buyer profile Homes England (the name adopted by the Homes and Communities Agency): past awards and live tenders](https://tendernation.io/buyers/homes-england-the-name-adopted-by-the-homes-and-communities-agency) [Sector More Software packages & information systems tenders](https://tendernation.io/sectors/software-information-systems)

## More tenders like this

[Servers – Dodávka Cisco Catalyst Center · Ústav organické chemie a biochemie AV ČR, v. v. i. · 32 days left · 20 Nov 2026](https://tendernation.io/opportunities/01a156a9-9f50-7023-a3e7-14aa2b5fbe03/czechia-servers-dodavka-cisco-catalyst-center) [IT software package – Dostawa pakietów subskrypcji Microsoft albo pakietów równoważnych · Państwowa Inspekcja Pracy Główny Inspektorat Pracy · 36 days left · 24 Nov 2026](https://tendernation.io/opportunities/01a156a9-98e4-702f-a918-9b94f1198862/poland-it-software-package-dostawa-pakietow-subskrypcji-microsoft-albo-pakie) [Software package and information systems – AutoDesk Lizenzen · Hamburger Energienetze GmbH · 25 days left · 13 Nov 2026](https://tendernation.io/opportunities/01a156a9-63e1-72f3-8854-0907e37f21fa/germany-software-package-and-information-systems-autodesk-lizenzen) [Software package and information systems – System wykrywania anomalii w ruchu SMTP w oparciu o Self-Learning AI · Narodowy Bank Polski · 31 days left · 19 Nov 2026](https://tendernation.io/opportunities/01a156a9-6291-7294-b080-d589aa9cf0c0/poland-software-package-and-information-systems-system-wykrywania-anomalii-w) [Software package and information systems – Smart život a služby v meste Liptovský Mikuláš · Mesto Liptovský Mikuláš · 22 days left · 10 Nov 2026](https://tendernation.io/opportunities/01a156a9-8b56-73a0-8eb6-a47a2de359b0/slovakia-software-package-and-information-systems-smart-zivot-a-sluzby-v-mes) [Servers – Ausschreibung CITRIX Wartungsverlängerung ab 2027 · Hannoversche Informationstechnologien AöR / hannIT · 4 days left · 23 Oct 2026](https://tendernation.io/opportunities/01a156a9-615c-713f-93e6-da09a76b2c98/germany-servers-ausschreibung-citrix-wartungsverlangerung-ab-2027)
