Contract

Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution

  • Ministry of Defence

F03: Contract award notice

Notice identifier: 2025/S 000-055285

Procurement identifier (OCID): ocds-h6vhtk-04db93 (view related notices)

Published 10 September 2025, 10:47am



Section one: Contracting authority

one.1) Name and addresses

Ministry of Defence

Flowerdown Hall, RAF Cosford

Wolverhampton

WV7 3EX

Email

morgan.buckley116@mod.gov.uk

Country

United Kingdom

Region code

UKG39 - Wolverhampton

Internet address(es)

Main address

www.contracts.mod.uk

one.4) Type of the contracting authority

Ministry or any other national or federal authority

one.5) Main activity

Defence


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution

two.1.2) Main CPV code

  • 72212170 - Compliance software development services

two.1.3) Type of contract

Services

two.1.4) Short description

A license agreement for the usage of an integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications

two.1.6) Information about lots

This contract is divided into lots: No

two.1.7) Total value of the procurement (excluding VAT)

Value excluding VAT: £7,208,697

two.2) Description

two.2.2) Additional CPV code(s)

  • 72262000 - Software development services

two.2.3) Place of performance

NUTS codes
  • UKJ1 - Berkshire, Buckinghamshire and Oxfordshire

two.2.4) Description of the procurement

A license agreement for a suite of integrated applications that operate at both OFFICIAL and SECRET using on premise facilities as required by the Authority.

two.2.5) Award criteria

Price

two.2.11) Information about options

Options: Yes

Description of options

1 x 12 month optional extension

two.2.13) Information about European Union Funds

The procurement is related to a project and/or programme financed by European Union funds: No


Section four. Procedure

four.1) Description

four.1.1) Type of procedure

Award of a contract without prior publication of a call for competition in the cases listed below

  • The procurement falls outside the scope of application of the regulations

Explanation:

Air Command, part of the UK Ministry of Defence (the Authority), has awarded a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; ‘the Solution‘ will maintain the Authority’s existing Performance And Risk Management Information System (PARMIS) Platform.

In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons.

The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. there is no other economic operator that can provide this capability and meet Air’s delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: No

four.2) Administrative information

four.2.1) Previous publication concerning this procedure

Notice number: 2025/S 000-003702


Section five. Award of contract

Contract No

713878451

Title

Provision of an Enterprise Governance, Risk Management and Compliance Solution

A contract/lot is awarded: Yes

five.2) Award of contract

five.2.1) Date of conclusion of the contract

23 July 2025

five.2.2) Information about tenders

Number of tenders received: 1

The contract has been awarded to a group of economic operators: No

five.2.3) Name and address of the contractor

Riskonnect Limited

London

Country

United Kingdom

NUTS code
  • UKI - London
The contractor is an SME

No

five.2.4) Information on value of contract/lot (excluding VAT)

Total value of the contract/lot: £7,208,697


Section six. Complementary information

six.4) Procedures for review

six.4.1) Review body

Ministry of Defence

High Wycombe

Country

United Kingdom