Define a single integrated system to manage risks, audit actions, controls and assurance activities aligned to UKSBS governance, ISO27001, CAF and Government Standards. UK Shared Business Services (UKSBS) is seeking to understand the market for a Risk Management and Assurance system that can support enterprise-wide governance and compliance aligned to ISO27001, CAF and wider Government standards. The intended solution should provide a single, integrated platform to manage risks, controls, audit actions and assurance activities, supporting a Three Lines of Defence model and enabling a clear, consistent view across team, directorate and corporate levels. The system should facilitate risk identification, scoring, escalation and linkage to strategic objectives, alongside the ability to define and monitor risk appetite, including automated identification of breaches. The solution is also expected to support end-to-end assurance processes, including audit and action tracking, control management, compliance mapping, and evidence handling, with robust reporting and dashboards to support both operational management and Board-level governance. Key considerations include configurability, usability, integration with existing tools, and strong security and access controls. Overall, UKSBS is seeking a scalable and user-friendly solution that reduces manual effort, improves visibility of risks and controls, and strengthens organisational assurance and decision-making

Procurement Act 2023

The Contracting Authority UK Shared Business Services - would like to conduct pre-market engagement. As part of this information gathering exercise, we have developed a series of questions to ascertain the capability, the capacity and the appetite of the current market and would welcome your responses. Please see below link which will take you to a form with a list of pre market engagement questions. If you could please provide feedback by Wednesday 14th October 2026 this will be much appreciated. https://forms.cloud.microsoft/e/Fe7Z2VRCbx To Access the Specification which is the current version of the Specification, which will provide further details on the requirement, please contact [email protected], referencing DDaT26328 & Risk Management and Assurance System pre market engagement so that we can issue you the Document.