Home / Opportunities / Opportunity
PROCUREMENT OPPORTUNITY

Provision of an Enterprise Governance, Risk Management and Compliance (GRC) Solution

Ministry of Defence · compiled

Tender information last checkedLast checked 29 Sept 2026, 21:25.

Opportunity overview

A license agreement for the usage of an integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications

Awarded to

Amounts belong to published awards or contracts. Where several suppliers share one value, it is labelled as shared and is not a supplier-specific allocation.

Riskonnect Limited

Match pending…
Contract value
£6.7m
Awarded
Not supplied
Contract signed
4 Feb 2025
Award ID
003702-2025-713878451-1
Status
active
Location
London, UK, EC3V 0XL, United Kingdom

Riskonnect Limited

Match pending…
Contract value
£7.2m
Awarded
Not supplied
Contract signed
22 Jul 2025
Award ID
055285-2025-713878451-1
Status
active
Location
London, UKI, United Kingdom

Classification

  • CPV72212170 — Compliance software development services
  • CPV72262000 — Software development services

Lots

  • A license agreement for a suite of integrated applications that operate at both OFFICIAL and SECRET using on premise facilities as required by the Authority.Value not stated

Published notice details

Additional information from the published procurement release. Fields appear only when supplied by the source; check the original notice and tender documents before acting.

Scope, procedure and submissions

Id
ocds-h6vhtk-04db93
Status
complete
Procurement Method
limited
Main Procurement Category
services
Procurement Method Details
Award procedure without prior publication of a call for competition
Why this procedure was chosen
Air Command, part of the UK Ministry of Defence (the Authority), has awarded a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; ‘the Solution‘ will maintain the Authority’s existing Performance And Risk Management Information System (PARMIS) Platform. In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons. The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. there is no other economic operator that can provide this capability and meet Air’s delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.

Amendments

Entry 1
Id
3

Unstructured Changes

Entry 1

Where

Label
Explanation
Section
7

New Value

Text
Air Command, part of the UK Ministry of Defence (the Authority), intends to award a Single Source contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; ‘the Solution‘ will maintain the Authority’s existing Performance And Risk Management Information System (PARMIS) Platform. The estimated value of the contract is £2.78M inc VAT/yr. In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons. The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. Analysis of Crown Commercial Frameworks indicates that there is no other economic operator that can provide this capability and meet Air’s delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.

Old Value

Entry 2
Id
4
Description
The text to be corrected in the original notice at VII.1.2 above also replaces the text at VII.1.2 in the Corrigendum with reference number 2025/S 000-003768. This notice is not a request for expressions of interest so please do not apply to be invited to tender. This notice advises that the Authority has decided to negotiate a contract with the named supplier on a single source basis, and is published for reasons of transparency. If you are interested in becoming a sub-contractor for this requirement, you should apply directly to the supplier named above.

Unstructured Changes

Entry 1

Where

Label
Explanation
Section
IV.1

New Value

Text
Air Command, part of the UK Ministry of Defence (the Authority), intends to award a contract, for a term of 2 years (with a 1 x 12 month option) to Riskonnect Limited for a license agreement for the usage of the CAM Managed Services (CAMMS) integrated suite of applications covering Governance, Risk Management and Compliance (GRC), P3M, Strategy (performance), Audit & Assurance and Workflow applications; ‘the Solution‘ will maintain the Authority’s existing Performance And Risk Management Information System (PARMIS) Platform. The estimated value of the contract is £8.28M inc VAT. In accordance with the provisions of The Public Procurement (Amendment etc.) (EU Exit) Regulations 2020 SI No. 2020/1319, this procurement falls to be regulated under the provisions of the Public Contracts Regulations 2015 (PCR 2015) as amended (in particular by SI 2020/1319). Prior publication of a contract notice in the Official Journal of the European Union is no longer appropriate. It is considered that the award of the contract without prior publication of a contract notice in the UK e-notification service (as required by the relevant legislation) is lawful in accordance with regulation 32(2)(b)(ii) of the PCR 2015 because competition is absent for technical reasons. The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available. there is no other economic operator that can provide this capability and meet Air’s delivery and accredited system performance requirements. Transitioning to a new system could result in significant incompatibility and integration issues with existing digital infrastructure, APIs and information management practices. This could lead to data integrity and migration problems and the potential loss of Authority critical information.

Old Value

Text
The PARMIS platform utilised by the Authority to host the Solution has become deeply embedded within Air Command’s organisational processes with functional and non-functional services tailored to specific MOD orientated requirements. Riskonnect is the only economic operator that is capable of providing this suite of integrated applications at both OFFICIAL and SECRET using on premise facilities as required by the Authority. In addition, the CAMMS solution has been accredited to operate with a government supplied data diode, on the Army Digital Services (ADS) infrastructure, to facilitate data transfer between OFFICIAL to SECRET and allows the SECRET instance of the software to provide a single comprehensive aggregated view of Information available.

Legal basis

Id
32014L0024
Scheme
CELEX

Classification

Id
72212170
Scheme
CPV
Description
Compliance software development services

Procedure reasons

Entry 1
Id
D_OUTSIDE_SCOPE
Scheme
TED_PT_AWARD_CONTRACT_WITHOUT_CALL
Description
The procurement falls outside the scope of application of the directive

Lots and requirements

Entry 1
Id
1
Status
cancelled
Has Options
Yes
Description
A license agreement for a suite of integrated applications that operate at both OFFICIAL and SECRET using on premise facilities as required by the Authority.

Options

Description
1 x 12 month optional extension

Award criteria

Criteria

Criterion 1
Type
price

Items and delivery

Item 1
Id
1
Related Lot
1

Delivery locations

Entry 1
Region
UKJ1
Entry 2
Region
UKJ1
Entry 3
Region
UKJ1

Additional Classifications

Entry 1
Id
72262000
Scheme
CPV
Description
Software development services

Buyer, suppliers and contacts

Organisation 1
Id
GB-FTS-98960
Name
Air Commercial

Roles

buyer

Address

Region
UK
Locality
Wolverhampton
Postal Code
WV7 3EX
Country Name
United Kingdom
Street Address
Flowerdown Hall, RAF Cosford

Details

Classifications

Entry 1
Id
MINISTRY
Scheme
TED_CA_TYPE
Description
Ministry or any other national or federal authority, including their regional or local subdivisions
Entry 2
Id
02
Scheme
COFOG
Description
Defence

Identifier

Legal Name
Air Commercial

Contact

Name
Morgan Buckley
Organisation 2
Id
GB-FTS-137070
Name
Riskonnect Limited

Roles

supplier

Address

Region
UK
Locality
London
Postal Code
EC3V 0XL
Country Name
United Kingdom
Street Address
3rd Floor 70 Gracechurch Street

Details

Scale
large

Identifier

Legal Name
Riskonnect Limited
Organisation 3
Id
GB-FTS-137071
Name
Air Commercial

Roles

reviewBody

Address

Locality
High Wycombe
Postal Code
HP14 4UE
Country Name
United Kingdom
Street Address
Nimrod Building, 3 Site

Identifier

Legal Name
Air Commercial

Contact

Organisation 4
Id
GB-FTS-10917
Name
Ministry of Defence

Roles

buyer

Address

Region
UKG39
Locality
Wolverhampton
Postal Code
WV7 3EX
Country Name
United Kingdom
Street Address
Flowerdown Hall, RAF Cosford

Details

Classifications

Entry 1
Id
MINISTRY
Scheme
TED_CA_TYPE
Description
Ministry or any other national or federal authority, including their regional or local subdivisions
Entry 2
Id
02
Scheme
COFOG
Description
Defence

Identifier

Legal Name
Ministry of Defence

Contact

Name
Morgan Buckley
Organisation 5
Id
GB-FTS-160352
Name
Riskonnect Limited

Roles

supplier

Address

Region
UKI
Locality
London
Country Name
United Kingdom

Details

Scale
large

Identifier

Legal Name
Riskonnect Limited
Organisation 6
Id
GB-FTS-12736
Name
Ministry of Defence

Roles

reviewBody

Address

Locality
High Wycombe
Country Name
United Kingdom

Identifier

Legal Name
Ministry of Defence

Award information

Award 1
Id
003702-2025-713878451-1
Title
Provision of a Governance, Risk Management and Compliance (GRC) Software
Status
active
Has Subcontracting
Yes

Suppliers

Supplier 1
Id
GB-FTS-137070
Name
Riskonnect Limited

Related lots

1
Award 2
Id
055285-2025-713878451-1
Title
Provision of an Enterprise Governance, Risk Management and Compliance Solution
Status
active

Suppliers

Supplier 1
Id
GB-FTS-160352
Name
Riskonnect Limited

Related lots

1

Contracts and changes

Entry 1
Id
003702-2025-713878451-1
Title
Provision of a Governance, Risk Management and Compliance (GRC) Software
Status
active
Award ID
003702-2025-713878451-1
Date Signed
4 Feb 2025, 00:00

Value

Amount
6,672,000
Currency
GBP
Entry 2
Id
055285-2025-713878451-1
Title
Provision of an Enterprise Governance, Risk Management and Compliance Solution
Status
active
Award ID
055285-2025-713878451-1
Date Signed
23 Jul 2025, 00:00

Value

Amount
7,208,697
Currency
GBP

Recorded locations

  • Buyer location · Wolverhampton · UKG39 · WV7 3EX · United Kingdom
  • Delivery location · UKJ1

Notice and amendment history

1 published notice version reviewed by ProcuraAxis.

1 VERSION
  1. ocds-h6vhtk-04db93-2025-09-10T10:47:31+01:00compiled ·