RFI- Governance Risk Compliance Solutions

The Maryland State Board of Elections (SBE) has issued a Request for Information (RFI) for a Governance Risk Compliance (GRC) solutions platform, targeting implementation across Anne Arundel County and the state. The procurement seeks a comprehensive software solution to support Authority to Operate (ATO), Risk Management Framework (RMF), and Cyber Security Framework (CSF) requirements. SBE is specifically looking for a scalable, user-friendly, and secure GRC platform that provides robust integration, streamlines compliance and authorization processes, enables centralized risk management, and enhances reporting and audit readiness. Key deliverables include a platform that can centralize policy management, improve operational efficiency, and address current compliance gaps created by manual processes. Vendors must submit detailed responses by February 14, 2025, at 2:00 pm, emailing proposals to whitney.leroux@maryland.gov. The RFI requires vendors to provide comprehensive information about their solution, including company location, platform specifications, security features, update flexibility, training documentation, and administration capabilities. Potential respondents may be invited to provide presentations and demonstrations of their proposed solutions.

While the RFI does not explicitly outline set-aside designations or specific vendor restrictions, it suggests a competitive procurement process open to GRC solution providers. The document indicates that vendors will need to submit non-binding cost estimates for yearly terms to assist with procurement planning. No specific incumbent vendors are mentioned, though the current system relies on a combination of manual processes and existing tools that create operational inefficiencies. The RFI implies that the eventual procurement will require a solution that can integrate with existing technological infrastructure while providing enhanced compliance management capabilities. Although specific budget ranges are not disclosed, the comprehensive requirements suggest a potentially significant technology investment aimed at improving the state's risk and compliance management infrastructure. The procurement appears designed to solicit innovative GRC solutions that can comprehensively address the Maryland State Board of Elections' complex governance and cybersecurity needs.