GRC Solution

Overview SA Water Corporation is seeking a qualified and capable vendor to deliver a successful implementation of a single, integrated Governance, Risk and Compliance Solution (GRC Solution) that meets SA Water's requirements. About SA Water is a water utility wholly owned by the Government of South Australia. It employs more than 1,600 people across a broad range of disciplines who operate more than $11 billion of assets, including critical infrastructure, and delivers essential water and sewerage services to more than 1.8 million people. Purpose The objective of this Invitation is to identify a qualified and capable vendor with the proven experience, technical expertise, and strategic foresight to deliver a successful implementation of the GRC Solution. The GRC Solution will support a consistent and coordinated approach to risk, compliance, assurance, cyber GRC and third-party risk management, enabling reliable information, clearer traceability, efficient workflows, proactive monitoring and timely reporting to support governance and informed decision-making. Objectives SA Water seeks to: Procure an off-the-shelf governance risk and compliance (GRC) solution, including licence and support (the Proposed Solution) Engage a trusted business partner for the delivery of the Proposed Solution, including discovery, design and implementation Scope The Tenderer must tender for the entire scope across Phase 1 and Phase 2, with pricing provided for each phase. Phase 1 (MVP) The scope includes: Enterprise Risk Management Compliance Management, aligned to AS ISO 37301 Assurance Management, aligned to the Global Internal Audit Standards 2024 Cyber/Vendor Risk Management Action Management Reporting and Insights Common workflows Platform configuration Priority data migration MVP-critical integrations Change management Phase 2 (future, subject to funding) The scope includes: Business Continuity and Resilience Asset and Infrastructure Management of Change Work Health and Safety, aligned to ISO 45001 Incident Management migration from legacy systems Remaining integrations Reporting Change management Out of Scope Bespoke custom development Emergency and operational incident management Operating model or policy redesign Legacy data remediation beyond agreed priority sets Non-required integrations or AI Enterprise-wide training beyond implementation Scope expansion without formal approval Contract Terms and Conditions SA Water's preferred objective is to deliver Phase 1 during the 2027 calendar year Tenderers are invited to propose an achievable delivery approach that supports implementation at the earliest practicable date, and in any event no later than 30 June 2028 Instructions to Tenderers SA Water conducts this tender process using SA Water's Supplier Portal. Please refer to the 'How to access SA Water's public requests for proposal' instructions to view the tender and participate in the RFx. Supplier proposals must not be uploaded to SA Tenders & Contracts and must not be submitted as hardcopy. Proposals must only be uploaded to SA Water's Supplier Portal. Once you have downloaded and reviewed the instructions, access the request for proposal here: Show public request for proposals Enquiries Contact: Belinda London Office: +61 (08) 7424 3737 Phone: +61 (08) 7424 1950 Email: Belinda.London@sawater.com.au