Addendum No 4-Governance, Risk and Compliance Auto Platform

The West Virginia Department of Administration Purchasing Division, on behalf of the West Virginia Office of Technology, is requesting quotes for Governance, Risk and Compliance (GRC) software maintenance and support services under CRFQ 0231 OOT2700000002, with quotes due August 11, 2026 at 1:30 p.m. Eastern Time. This is Addendum No. 4, issued August 6, 2026, which corrects an error and clarifies attachment of the 2026 WVCSF spreadsheet with no other substantive changes to the solicitation.

The scope covers GRC software maintenance and support across four annual line items: Year One (initial term) and Years 2, 3, and 4 (renewal options), each priced as a lump-sum yearly amount inclusive of specifications 4.1 through 4.9. Vendors must submit unit prices as grand total annual amounts for each contract year. The 2026 WVCSF cybersecurity maturity assessment framework establishes 23 standardized requirements mapped across five functional categories — Govern, Identify, Protect, Detect, and Respond — aligned with established cybersecurity frameworks and addressing legal and regulatory compliance management, risk appetite, asset inventory, vulnerability management, data protection, physical access controls, incident detection, and supply-chain coordination.

Place of performance is the West Virginia Office of Technology, Building 5, 10th Floor, 1900 Kanawha Boulevard East, Charleston, West Virginia. Quotes should be submitted to the Department of Administration Purchasing Division, 2019 Washington Street East, Charleston, West Virginia 25305. The question deadline was July 22, 2026 at 3:00 p.m.; that deadline has passed. Contact Toby L. Welch, Purchasing Division Buyer, at (304) 558-8802 or toby.l.welch@wv.gov for inquiries.