RFP2021-002409 - Quantitative Risk Management Solution

Ontario Health is seeking a quantitative risk management software-as-a-service (SaaS) solution that correctly and effectively implements the Factor Analysis of Information Risk (FAIR) risk model and methodology for computing quantitative measurements of risk. 
The selected solution’s FAIR implementation and associated services, including FAIR-based risk assessment consultancy and FAIR certification training, must be formally authorized under The Open Group’s Open FAIR Body of Knowledge Commercial License.  The quantitative risk management solution must further be able to demonstrate the accuracy and reliability of the mathematical and applied statistics algorithms involved in implementing FAIR. 
Legacy and existing free implementations of FAIR have been mostly spreadsheet-based, with limited functionality and little to no support.  The selected proponent shall offer more dynamic and robust functionalities and capabilities, including:

1. Solution onboarding services, i.e. account setups, user training, system configuration, data loads, etc.
2. FAIR certification training as needed (for up to 5 Ontario Health staff members)
3. Run 25-50 detailed risk scenarios per year, to start
4. Run 750-1,000 risk triage scenarios per year, to start
5. Version control of edited risk scenarios
6. Dynamic comparisons of different risk scenarios
7. Environment modeling of Ontario Health, i.e. pre-calculated repositories of risk assessment inputs such as asset values, threats, etc.
8. Risk analysis dashboard / report generation
9. Integration with Governance, Risk and Compliance (GRC) solutions
10. Regular vendor maintenance and support