Enterprise GRC for TSTC

Texas State Technical College is requesting proposals for an Enterprise Governance, Risk, and Compliance (GRC) platform under RFP #64, with proposals due November 10, 2026, and submission exclusively through TSTC's Strategic Sourcing portal.

The scope is a unified software solution to centralize governance, audit, risk management, compliance tracking, policy and document management, workflow automation, reporting, and corrective action monitoring across Internal Audit, Legal, Policy Management, Information Technology, Risk Management, and Environmental Health and Safety. The platform must support configurable workflows, role-based permissions, real-time control monitoring, anomaly detection, and continuous monitoring. It must integrate with Workday, Google Workspace, Microsoft 365, and identity management tools, and support policy publication to TSTC's public-facing website through content management system integration.

Vendors must comply with TX-RAMP certification, FERPA safeguards, WCAG 2.1 AA accessibility standards, and electronic information resources accessibility requirements. Proposals must include a detailed implementation timeline with key milestones and deliverables, customer support model with defined SLAs, training options for multiple user types, and references from at least three relevant clients demonstrating similar implementation experience.

Evaluation is weighted as follows: Support and Service Capability (35 points), Security and Compliance with Integration and Functional Requirements (30 points), Cost Effectiveness (20 points), and Experience in Sector (15 points). Pricing must include transparent breakdowns of software licensing or SaaS fees, implementation and configuration costs, data migration expenses, integration costs, training, ongoing maintenance and support, hosting and storage fees, and renewal pricing with annual escalation rates. Vendors should identify licensing models and highlight cost-saving opportunities such as educational discounts or cooperative purchasing options.

All inquiries must be posted on the event's Q&A Board within the portal. Vendors requiring assistance with portal access should contact TSTC's Strategic Sourcing Department at solicitations@tstc.edu.