Source: https://tendernation.io/opportunities/01a13cd9-4fd3-71ee-8989-12c5ea7511f5/risk-and-audit-system-replacement-project closed GB open procedure # Risk and Audit System Replacement Project [Financial Conduct Authority](https://tendernation.io/buyers/financial-conduct-authority) Estimated value £1,000,000 to £3,500,000 Published 1 Feb 2024 Deadline Closed 4 Mar 2024 ## Who can bid - Open procedure Anyone can submit a full tender; there is no shortlisting stage. ## About this tender The FCA is establishing a contractual mechanism to implement a Risk, Internal Audit and Compliance Solution to the FCA for a period of three years starting from 1 September 2024 with an option to extend by two further periods of 12 months each (maximum term 5 years). As a fully independent subsidiary of the FCA, the PSR operates to a shared service agreement, but each retains full data segregation. Any proposed solution will be required to maintain this segregation. The system will support the further embedding of the Risk Management Frameworks that are operated by the FCA and PSR respectively, enabling greater levels of risk maturity across both organisations and ensuring efficient and effective risk-conscious decision making and prioritisation. Risk Management plays an essential role in helping to deliver on our Strategy and statutory and operational objectives. It does this by helping to ensure we are operating in an effective and efficient risk-based manner in identifying and delivering the timely interventions to appropriately identify, prevent, mitigate, manage, influence and report on actual and potential Risks of Harm. The current risk system is a commercial off the shelf (COTS), software as a service (SaaS) platform. This has been configured to support, as examples, the FCA's risk of harm and own risk taxonomies and scoring methodologies, to automate aspects of the FCA's Risk and Control Self-Assessment (RCSA) process; Risk Event Management process; risk acceptance and various risk and assurance reviews that are conducted by 2LOD. Additionally, it includes a small number of cross-cutting Risks of Harm. The current Internal Audit (IA) system is used as a workflow tool to manage the activities associated with internal audits, including findings and actions. This is also a COTS SaaS, with a component hosted on desktop. Both systems are functionally similar platforms and classified as 'Governance, Risk and Compliance' software tools. Moving to a single platform for all risk and audit information will support the consolidation of our IT estate. A unified platform is envisaged to benefit day to day users, providing a clear view of the risks and controls they manage, linking the outcomes of IA reviews to wider risk management activities. In addition, this would provide stakeholders with an improved view of risk exposures and resultant mitigations by connecting the data to enable more effective and efficient decision making. The system will be required to support the FCA's roadmap for critical risk management tools and processes and must therefore be able to support existing (and new) capabilities that have not previously been automated, such as Compliance (i.e., policy management and the implementation of a standardised control library) and Key Risk Indicator management. Read full description ## CPV classification IT software package Source Contracts Finder (UK) [View official notice](https://www.contractsfinder.service.gov.uk/notice/26b64e98-a7d9-4554-a137-3e68162e0bc4) Never miss a tender like this again Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start. [Track tenders free](https://tendernation.io/register) [Buyer profile Financial Conduct Authority: past awards and live tenders](https://tendernation.io/buyers/financial-conduct-authority) [Sector More Software packages & information systems tenders](https://tendernation.io/sectors/software-information-systems) ## More tenders like this [Preliminary Market Engagement - Corporate Enterprise Resource Planning (ERP) · North East Lincolnshire Borough Council · 21 days left · 9 Nov 2026](https://tendernation.io/opportunities/01a15410-bf5e-72d1-8225-fbabeaba595f/preliminary-market-engagement-corporate-enterprise-resource-planning-erp) [Servers – Dostawa serwerów do klastra wirtualizacyjnego · Politechnika Rzeszowska · 2 days left · 21 Oct 2026](https://tendernation.io/opportunities/01a15183-2e23-7066-ba48-4fc2a9243b50/poland-servers-dostawa-serwerow-do-klastra-wirtualizacyjnego) [License management software package – Dostawa licencji bezpieczeństwa do Systemu DNS · Poczta Polska S.A. · 15 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-20fa-7396-87e7-40ce84cb0f4d/poland-license-management-software-package-dostawa-licencji-bezpieczenstwa-d) [Security software package – Pořízení a implementace integrovaného řešení EDR/XDR a SIEM · Fakultní nemocnice Plzeň · 30 days left · 18 Nov 2026](https://tendernation.io/opportunities/01a15183-1e5d-73ea-989e-b9c221c4c490/czechia-security-software-package-porizeni-a-implementace-integrovaneho-rese) [Computer servers – „Dostawa serwerów komputerowych wraz z dedykowanymi kartami graficznymi dla Copernicus PL Sp. z o.o.” · Copernicus Podmiot Leczniczy Spółka Z Ograniczoną Odpowiedzialnością · 3 days left · 22 Oct 2026](https://tendernation.io/opportunities/01a15183-08e5-7339-9a05-be1adf5996b5/poland-computer-servers-dostawa-serwerow-komputerowych-wraz-z-dedykowanymi) [Software package and information systems – Datenerfassungssystem · Dataport AöR · 15 days left · 3 Nov 2026](https://tendernation.io/opportunities/01a15183-43c5-7007-89f5-0ea2d1525f27/germany-software-package-and-information-systems-datenerfassungssystem)