Skip to content
Tenderpatch
This is an early-stage notice (pipeline, market engagement or planned procurement). It is not yet open for bids. Find open tenders

GRC Enterprise & Cyber Risk Management RFI ROM

CADENT GAS LIMITED

Planned

Key facts

Closing date
Not stated by the buyer
Buyer's estimated value
Not stated The buyer's own estimate, not income to you.
Contract period
3 Jul 2027 to 2 Jul 2030
Procedure
Not stated
Notice type
Preliminary market engagement notice (UK2)

Decision brief

Taken from the buyer's published notice (shown as written, shortened where long). Tenderpatch has not added to or interpreted it. Always read the official documents before bidding.

How bids will be scored
Not stated in the notice.
Conditions of participation (what you must show)
None published in the notice. They may be in the tender documents.
Contract length and extensions
3 Jul 2027 to 2 Jul 2030.
How to submit
Not stated in the notice.
Tender documents
No document links in the notice. Use the official notice link.
New to public tenders? Plain-English guide to this page
Framework
An agreement that sets terms for work the buyer may order later, often from several suppliers. The value shown usually covers the whole agreement, not one job.
Open for bids / closing date
You must submit by the closing date and time, normally through the buyer's own online portal. Late bids are normally refused.
Clarification questions
A deadline for asking the buyer questions about the tender. It is earlier than the closing date.
Conditions of participation
What the buyer asks suppliers to show before they can be considered, such as experience, insurance or accreditations.
Bids are scored on
How the buyer will compare bids, usually a split between price and quality. A 60/40 split in favour of quality means the cheapest bid will not necessarily win.
Lots
A tender can be split into parts. You can often bid for only the lots that suit you.
Area (ITL)
The buyer names an official statistical area for where the work is, not a street address. Check the tender documents for the actual sites.
UK4 and other notice codes
Official codes for the type of notice. A "tender notice" means bids are being invited.

General explanations written by Tenderpatch, not part of this notice.

Description

Cadent is seeking information from the market to understand available Governance, Risk and Compliance (GRC) SaaS solutions that can support both Enterprise Risk Management and Cyber Risk Management, as well as Internal Audit management. The purpose of this RfI / ROM is to explore supplier capability, solution fit, indicative implementation approach and timescales, licensing model, integration options, migration requirements and high-level ROM costs for a single GRC solution. The solution is expected to support the management of risks, controls, assurance activities (2nd line controls and 3rd line internal audits) issues, actions, exceptions, audits and reporting across Enterprise Risk Management and Cyber Risk Management. Cadent is particularly interested in understanding how suppliers can support a joined-up risk and control framework, aligned to Cadent’s governance structure and Three Lines Model, while also supporting key standards and regulatory frameworks such as NIS Regulations, CAF / eCAF, NIST 800-53, ISO27001 and Cyber Essentials+ and MITRE ATT&CK.