BETAThis is a new independent transparency project, not an official government website. The data is sourced from public registers and may contain errors, so always verify against the official source. If you find a problem, please report it here.
Loading contract…
Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution | UKGovscan
Loading contract…
AWARDEDProcurement notice · Ministry of DefenceRef ocds-h6vhtk-04db93
Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution
A license agreement for the usage of an integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications
This procurement was divided into 1 lots, each awarded separately. 1 bids were received in total.
Lots
1
Initial Term Value
£13,880,697
Bids Received
1
Bids per Lot
1
Limited competition: at least one lot received only a single bid.
Lot
Value
Bids Received
Awarded To
Status
Lot 1
£13,880,697
initial term
1
single bid — no competition
Riskonnect Limited
active
Data note: the source feed marks these lots as cancelled even though their awards are active — an inconsistency in the published notice. The award status is shown above.
Award criteria
Weightings from the notice.
Price
Key Dates
Published
10 September 2025
Tender Open
-
Tender Deadline
-
Award Date
-
Contract Signed
4 February 2025
Contract Start
-
Contract End
-
Notice Amendments
Changes the buyer published to this notice after it first appeared.
Amendment 3
Explanation (7): - → Air Command, part of the UK Ministry of Defence (the Authority), intends to award a Single Source contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; ‘the Solution‘ will maintain the Authority’s existing Performance And Risk Management Information System (PARMIS) Platform. The estimated value of the contract is £2.78M inc VAT/yr.
In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons.
The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. Analysis of Crown Commercial Frameworks indicates that there is no other economic operator that can provide this capability and meet Air’s delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.
Amendment 4
Explanation (IV.1): The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. → Air Command, part of the UK Ministry of Defence (the Authority), intends to award a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; ‘the Solution‘ will maintain the Authority’s existing Performance And Risk Management Information System (PARMIS) Platform. The estimated value of the contract is £8.28M inc VAT.
In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons.
The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. there is no other economic operator that can provide this capability and meet Air’s delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.
The text to be corrected in the original notice at VII.1.2 above also replaces the text at VII.1.2 in the Corrigendum with reference number 2025/S 000-003768.
This notice is not a request for expressions of interest so please do not apply to be invited to tender. This notice advises that the Authority has decided to negotiate a contract with the named supplier on a single source basis, and is published for reasons of transparency. If you are interested in becoming a sub-contractor for this requirement, you should apply directly to the supplier named above.
Procurement Details
Method
Limited — the buyer invited chosen suppliers
Method Details
Award procedure without prior publication of a call for competition
Route to market
Direct award
Main category
Services
Category
Software development services
Delivery location
UKJ1
Buyer Reference
ocds-h6vhtk-04db93
Legal Basis
Public Contracts Regulations 2015 (EU Directive 2014/24)
CPV Codes
72212170 – Compliance software development services; 72262000 – Software development services