SBE_RFI-_GRC_BPM-048154_.docx

Request for Information - Governance Risk Compliance Solutions

Date: Updated January 22, 2025

BPM-048154

Background:

The Maryland State Board of Elections (SBE) plans to procure a security governance solution to support Authority to Operate(ATO), Risk Management Framework(RMF) and Cyber Security Framework(CSF) requirements. SBE currently uses a combination of manual processes and tools for managing GRC. Limitation of this method creates inefficiencies and increases the potential for gaps in compliance.

This is not an official solicitation but is a Request for Information (RFI) to assist us with a solicitation at a later date.

SBE is seeking information from solutions providers to identify a scalable, user-friendly and secure GRC platform which will:

· Provides robust integration

· Streamlining compliance and Authorization

· Centralized risk management

· Enhanced reporting and audit readiness

· Enhance policy management

Information Requested in your Submission: SBE requests that responses to this RFI include the following information:

A. Your company’s full name and headquarters location (Country, County, City, and State) and the country and location(s) where the curing solution is designed, developed, and manufactured.

B. The solution’s full name, version number, whether it is currently in production or under development, and the latest or planned production release date.

C. A description of the solution’s security features and controls D. A description of the solution’s platform, whether it is a stand alone application, cloud based or uses other third party services to access it, including if any additional software installation would be necessary for it to run.

E. A description of the solution’s flexibility in accommodating technology advancements, security updates, and new regulations.

F. A description of the types of training and documentation available with your system.

G. A description of how SBE would administer the solution independently of the vendor H. A non-binding cost estimate for your solution for a yearly term. This is for our procurement timeline planning due to different processes required for various cost thresholds.

SBE may invite vendors to make presentations and/or demonstrate their systems to advance Maryland’s understanding of available solutions. All respondents to this RFI will be invited to present/demonstrate their solutions, and the invitations will be issued in writing. If presentations or demonstrations are given, SBE requests the presentations include any hardware, software, and/or services required for the solution or solutions.

All responses must be emailed to whitney.leroux@maryland.gov and received by February 14, 2025 at 2:00 pm. Questions must be emailed to: Whitney.LeRoux@Maryland.Gov and Akelius.Liggins@Maryland.Gov.

Jared DeMarinis State Administrator

Katherine Berry Deputy Administrator Michael Summers, Chairman Jim Shalleck, Vice Chairman Yaakov “Jake” Weissmann Diane Butler Victoria Jackson-Stanley

RFI- Xacta 01/21/2025

image1.png image2.png