NOTICE OF INTENDED PROCUREMENT
1. Procuring Entity’s Name and Address
Ontario Pension Board
200 King St. West, Suite 2200
Toronto ON M5H 3X6
2. Contact Information
For the purposes of this procurement process, the “RFP Contact” will be:
RFP Contact: Tonia Edwards, Senior Procurement Officer
Email: tonia.edwards@opb.ca
3. Description of Procurement
Governance, Risk and Compliance Management Software
OPB is seeking a cloud-based end-to-end Risk and Compliance Management workflow and automated reporting platform (“GRC Platform” or the “Platform”) to support OPB’s Governance, Risk and Compliance Management Programs. In addition to the Platform, the service provider will provide related services including but are not limited to implementation, maintenance, and training to support OPB’s usage of the Platform.
4. Time-Frame for Delivery, Duration of Contract and Extension Options
It is anticipated that the resulting contract will be awarded by October 29, 2021 and will be for a term of two (2) years with an option to extend on the same terms and conditions for an additional term of up to five (5) periods of up to one (1) year each.
5. Submission Deadline Date and Time
The submission deadline for this solicitation is September 7, 2021 at 3:00:00p.m. local time (EDT).
6. Location of Submission
Submission for this solicitation must be submitted at one (1) of the online tendering platforms set out above on or before the Submission Deadline. The proponent is advised to allow for sufficient time in the preparation and submission of its proposal to ensure its proposal is submitted well before the Submission Deadline. Proposals cannot be submitted after the Submission Deadline.
7. CFTA/CETA
Unless otherwise indicated, and subject to applicable exceptions and exclusions, this solicitation is covered by Chapter 5 of the Canadian Free Trade Agreement, and, where the contract value meets or exceeds applicable contract value thresholds, by the Chapter 19 of the Comprehensive Economic and Trade Agreement.
ADDITIONAL INFORMATION
The RFP process is a non-binding RFP which includes a consecutive negotiation process. The service provider may be requested to provide other related services to meet OPB needs during the term.
The following are mandatory functional, technical and other requirements applicable to this procurement:
- Proposed Platform must be a cloud-based platform with strong security controls, supported with evidence of SOC-II report for the primary data centre, current within the past 2 years.
- Risk and compliance functionality of the proposed Platform must be integrated (i.e., shared risk taxonomy, shared business process/owner structure, shared internal controls library including planned mitigations in workflows).
- Proposed Platform must provide the ability to create and configure custom reports with ability to export all data fields to multiple formats including PDF, Word, Excel at a minimum.
- Proposed Platform must have the ability to export and generate reports on all data with associated metadata to Excel.
- Proposed Platform must provide risk dashboards at different levels i.e., enterprise and/or functional business unit level.
- Proposed Platform must have the ability to generate risk heat maps and trend lines.
- Workflow management capabilities must exist within the Platform.
- OPB must be able to assign different user privileges, with at least two (2) OPB administrators.
- Proposed Platform must have the ability to house documents or link to documents external to the Platform.
- OPB’s data residency must be limited within the United States (US) and Canada. Solely Canadian data residency is preferred.
- No indemnity from OPB. The Agreement between OPB and the selected proponent must not contain an indemnity or any other form of indebtedness or contingent liability that would directly or indirectly increase the indebtedness or contingent liabilities of OPB.
