Provision of an Enterprise Risk Management Software System

AI-generated analysis of the documents. Check the official notice and any amendments for current submission details.

1. At a glance

2. Scope of Work

The University College Cork (UCC) requires a cloud-based software platform to support its enterprise risk management objectives. The contract duration is for an initial term of 4 years, with an option for up to two 12-month extensions. The estimated value of the contract, including potential extensions, is €135,000 excluding VAT.

The scope of services includes the provision, implementation, and ongoing support of this risk management software. Key functionalities and requirements are detailed across various appendices, including:

• Risk Register and Risk Assessment Structure: The system must support UCC's defined risk register and risk assessment structures. This includes standard template common risk assessments, dynamic and/or task, individual specific risk assessments, and checklists.
• Bowtie Risk Assessment: The platform must incorporate Bowtie risk assessment methodologies, with a flowchart provided for process understanding.
• User Access and Functionality:
• Access Group 1: Up to 27 users will require access to input risk assessments, Key Risk Indicators (KRIs), and Key Controls (KCs).
• Access Group 2: Up to 500 users will require the ability to input risk assessments, KRIs, and KCs.
• The system will potentially be accessed by over 20,000 users in total, across 12 Schools & Departments.
• Irish Language Support: The system must implement full Irish language support within 12 months of contract award.
• Implementation Timeline: The system must be fully implemented within 12 months of contract award.
• Cybersecurity: Compliance with relevant cybersecurity standards, such as ISO 27001 or equivalent, is required.
• Accessibility: Adherence to Web Content Accessibility Guidelines (WCAG 2.1) is mandated.

The contract will be managed through a single nominated entity responsible for the overall service delivery, irrespective of subcontracting.

3. Background & buyer context

University College Cork (UCC), established in 1845, is a constituent university of the National University of Ireland. This procurement is conducted under the open procedure as per the European Union (Award of Public Authority Contracts) Regulations 2016. The estimated contract value of €135,000 (excl. VAT) over a 4-year term, with potential extensions, indicates a focus on a specific, albeit significant, risk management software solution rather than a broad IT overhaul. UCC's policy aims to encourage participation by Small and Medium Enterprises (SMEs), suggesting a desire for accessible solutions and potentially fostering partnerships between larger and smaller entities. The inclusion of detailed appendices on risk assessment methodologies (Bowtie, standard, dynamic) points to a mature risk management framework within UCC that the new system must support.

4. Eligibility & selection criteria

Bidders must meet the following mandatory criteria to be considered:

• Turnover Requirement:
• Minimum average annual turnover of €270,000 for each of the previous 3 financial years, specifically relating to the supply of services similar to those required in this RFT.
• Audited financial statements/accounts for the last three years are required. Companies with an annual turnover of less than €4.4 million are exempt from requiring audited accounts, but must still provide evidence of turnover.
• Insurance:
• Employer's Liability: €13 million (on each and every occurrence basis).
• Public Liability: €6.5 million (on each and every occurrence basis).
• Professional Indemnity: €1 million (each and every claim or in the annual aggregate). A claims-made basis is acceptable, with a requirement to confirm the retroactive date and that cover will be maintained for at least 6 years post-contract completion.
• Cyber Security: €2 million (on each and every occurrence basis).
• Certifications:
• Compliance with relevant cybersecurity standards like ISO 27001 or equivalent is required.
• Compliance with Web Content Accessibility Guidelines (WCAG 2.1).
• Past Experience:
• A minimum of 3 successfully completed contracts within the last 4 years, providing similar or equivalent services and of a comparable value. Names and contact details for these references are required.
• Personnel: Not specified for this tender.
• Geographic / Facility Constraints:
• The system must implement full Irish language support within 12 months of contract award.
• The system must be fully implemented within 12 months of contract award.

5. Award criteria & scoring

The award criteria will determine the successful tenderer. The evaluation will follow a "Most Economically Advantageous Tender" (MEAT) approach, balancing price and quality.

Criterion Weight (%) Sub-criteria