ServiceNow IRM - Professional Services

The Department of Health, Disability and Ageing (DoHDA) is undertaking an Integrated Risk Management (IRM) initiative to strengthen its cyber risk management capability. The objective of this engagement is to configure and implement a ServiceNow-based IRM solution that delivers a unified, repeatable, and compliant cyber risk lifecycle aligned with Australian Government and international security frameworks.

The ServiceNow solution should establish a unified cyber risk lifecycle through configuration of risk registers, assessment models, treatment workflows and continuous monitoring.

The configuration of automated governance workflows for risk intake, approvals and control testing is needed to ensure cyber risk management is repeatable, reliable and compliant.

Strategic dashboards and analytics should be implemented to provide a consolidated executive view of risk posture and trends. DoHDA requires a tool that transforms the Cyber System Definition and Assessment process into a structured, repeatable workflow, aligned to ISM, PSPF and NIST guidance.

DoHDA seeks to engage a suitably qualified supplier to provide professional services to design, configure, integrate and support the implementation of this capability.