Procurement of an Enterprise Risk Management (ERM) Solution

Velindre University NHS Trust (the Authority) wishes to alert suppliers to its intention to hold preliminary market engagement with regards to the potential procurement of an Enterprise Risk Solution to assist in the recording and management of risks across the Authority, ranging from corporate, clinical and project risks. The Authority intends to procure an enterprise-wide software solution to support strategic and operational risk management. The contract will cover the provision of the platform, configuration, implementation, training, ongoing support, and maintenance. The solution must comply with NHS information governance, cyber security, and data-protection requirements and support integration with the Authorities existing technology landscape. The contract duration is expected to be:

Initial term: 5 years

Optional extensions: 2+2 years

The Authority seeks an ERM solution that provides:

• Comprehensive risk register functionality
• Incident and issue reporting
• Real-time dashboards & analytics
• Workflow, approvals & audit trail
• User-role and permission management
• NHS-compliant information governance and security controls
• Integration with existing Authorities systems (where applicable)
• Training and support for end-users and administrators
• Secure hosting and business continuity capabilities
• Project management tools such as schedule risk analysis (Monte Carlo Simulation) or equivalent
• Open architecture and integration into other systems

All suppliers must comply with relevant NHS and statutory requirements, including data-protection legislation and cyber-security standards.