26ACMA029 - Governance, Risk, and Compliance (GRC) system implementation

The ACMA seeks a competitive quote for a Governance, Risk, and Compliance (GRC) system to standardise risk management, regulatory compliance, policy governance, and audit readiness across diverse IT systems. The initiative aims to enhance security governance through a GRC platform that supports continuous compliance monitoring, risk assessment, and centralised tracking of risks and actions. Initial scope covers information and cybersecurity, with future expansion planned. Current distributed practices cause inconsistent approaches, duplicated effort, and gaps in oversight, limiting proactive risk management.

Please refer to the attached requirements document for additional details.