North Carolina Department of Information Technology

Buyer seeks information on a combined Business Continuity Management (BCM) and Governance, Risk and Compliance (GRC) solution. The solution should replace a legacy application and include an integrated Emergency Notification System. Buyer requires capabilities for business continuity, disaster recovery, risk assessment, vendor management, cybersecurity, and compliance. The solution must comply with NIST security guidelines and be comprehensive, including all necessary components.

• 10/10/2024 - Clarification Questions Deadline
• 10/16/2024 - Proposal Due Date

• Demonstrated compliance with NIST Special Publication 800-37 Rev. 2 and SP 800-53 Rev. 5
• Offer complete solution including hardware, software, licenses, support, maintenance, training, and labor

• Provide integrated Business Continuity Management (BCM) and Governance, Risk and Compliance (GRC) solution
• Implement Emergency Notification System
• Offer Business Impact Analysis and Risk Assessment capabilities
• Include Disaster Recovery Planning features
• Provide Testing, Exercising, and Education & Training functionalities
• Incorporate Vendor Risk Management and Cybersecurity Risk Assessment
• Utilize Unified Compliance Framework
• Implement Corrective Action Plan and Workflow Capabilities
• Ensure Access Control features
• Perform data migration from legacy application (approx. 60GB)