RFI No. DMS-2324-073

The Florida Department of Management Services (DMS) is issuing a Request for Information (RFI) to obtain information on Governance, Risk, and Compliance (GRC) platform solutions. The purpose of this RFI is to gather details from vendors regarding their GRC platform capabilities, including the ability to identify and assess risks, manage compliance, and provide reporting and access management features. DMS is seeking a scalable GRC platform that can be deployed across various Florida state agencies and local governments, enabling users to manage the cybersecurity risk landscape. The RFI response submission deadline is April 30, 2024, and DMS may select one or more vendors to present their solutions. Vendors are asked to provide information on pricing options, integrations, implementation support, customer support, and solution security, as well as submit a draft contract, current contracts with governmental entities, and any cooperative purchasing agreements.

The RFI indicates that Florida does not currently have a GRC solution in place, but is interested in cloud-based solutions that can integrate with various IT systems and data sources, and comply with state-specific cybersecurity and data management requirements. The information gathered from this RFI may be used by DMS to develop a future solicitation, though responding to the RFI does not guarantee a vendor's eligibility for any subsequent contract award. The RFI does not provide details on set-asides, incumbents, funding requirements, or other salient information beyond the timeline and process.