CADENT GAS LIMITED · Preliminary market engagement notice on Find a Tender
✓Tender information last checkedLast checked 19 Oct 2026, 10:41.
Opportunity overview
Cadent is seeking information from the market to understand available Governance, Risk and Compliance (GRC) SaaS solutions that can support both Enterprise Risk Management and Cyber Risk Management, as well as Internal Audit management.
The purpose of this RfI / ROM is to explore supplier capability, solution fit, indicative implementation approach and timescales, licensing model, integration options, migration requirements and high-level ROM costs for a single GRC solution. The solution is expected to support the management of risks, controls, assurance activities (2nd line controls and 3rd line internal audits) issues, actions, exceptions, audits and reporting across Enterprise Risk Management and Cyber Risk Management.
Cadent is particularly interested in understanding how suppliers can support a joined-up risk and control framework, aligned to Cadent’s governance structure and Three Lines Model, while also supporting key standards and regulatory frameworks such as NIS Regulations, CAF / eCAF, NIST 800-53, ISO27001 and Cyber Essentials+ and MITRE ATT&CK.
Classification
CPV48000000 — Software package and information systems
CPV66517300 — Risk management insurance services
Lots
Lot 1Value not stated
Documents and notices
Preliminary market engagement notice on Find a TenderOpen source ↗
Published notice details
Additional information from the published procurement release. Fields appear only when supplied by the source; check the original notice and tender documents before acting.
1 published notice version reviewed by ProcuraAxis.
1 VERSION
1
098276-2026Preliminary market engagement notice on Find a Tender ·
PROCURAAXIS ANALYSIS
ProcuraAxis Analysis
Our approved analysis of the opportunity appears below the official tender information.
ANALYSIS PREVIEW
Opportunity intelligence at a glance
Cadent is conducting an early-stage RFI/ROM, not an open tender, for information on a single SaaS GRC solution covering enterprise risk, cyber risk and internal audit management. It seeks market input on capability, fit, implementation, timing, licensing, integrations, migration and indicative costs.
Who this may suit
Potential fit for providers of SaaS GRC platforms with enterprise risk, cyber risk and internal-audit functionality. Supplier selection and submission requirements are unknown.
Key points identified
Solution scopeSingle GRC SaaS solution supporting Enterprise Risk Management, Cyber Risk Management and Internal Audit management.Evidence: “single GRC solution” supporting “Enterprise Risk Management and Cyber Risk Management, as well as Internal Audit management”.
Functional coverageManagement of risks, controls, assurance activities, issues, actions, exceptions, audits and reporting.Evidence: “expected to support the management of risks, controls, assurance activities ... issues, actions, exceptions, audits and reporting”.
Framework alignmentJoined-up risk and control framework aligned to Cadent's governance structure and Three Lines Model.Evidence: “support a joined-up risk and control framework, aligned to Cadent’s governance structure and Three Lines Model”.
94% approved-analysis confidence7 supplier criteria identified3 risks or unknowns
ProcuraAxis structures information found in published procurement records, checks the result for consistency and publishes only approved analysis. Confidence describes the completeness and consistency of the available source information; it is not a guarantee of eligibility or contract award.
Cadent is conducting an early-stage RFI/ROM, not an open tender, for information on a single SaaS GRC solution covering enterprise risk, cyber risk and internal audit management. It seeks market input on capability, fit, implementation, timing, licensing, integrations, migration and indicative costs.
Who this may suit
Potential fit for providers of SaaS GRC platforms with enterprise risk, cyber risk and internal-audit functionality. Supplier selection and submission requirements are unknown.
Key deliverables
Market information on a single GRC SaaS solution
Indicative implementation approach and timescales
Licensing, integration and migration options
High-level ROM costs
SUPPLIER REQUIREMENTS
7 criteria identified
ISO27001
84% confidence
Unclear · Not specified
View supporting evidence
The solution is expected to support key standards and regulatory frameworks “such as ... ISO27001”.
Cyber Essentials+
84% confidence
Unclear · Not specified
View supporting evidence
The solution is expected to support key standards and regulatory frameworks “such as ... Cyber Essentials+”.
Solution scope
98% confidence
Single GRC SaaS solution supporting Enterprise Risk Management, Cyber Risk Management and Internal Audit management.
View supporting evidence
“single GRC solution” supporting “Enterprise Risk Management and Cyber Risk Management, as well as Internal Audit management”.
Functional coverage
97% confidence
Management of risks, controls, assurance activities, issues, actions, exceptions, audits and reporting.
View supporting evidence
“expected to support the management of risks, controls, assurance activities ... issues, actions, exceptions, audits and reporting”.
Framework alignment
95% confidence
Joined-up risk and control framework aligned to Cadent's governance structure and Three Lines Model.
View supporting evidence
“support a joined-up risk and control framework, aligned to Cadent’s governance structure and Three Lines Model”.
Standards and frameworks support
96% confidence
Support for NIS Regulations, CAF/eCAF, NIST 800-53, ISO27001, Cyber Essentials+ and MITRE ATT&CK is sought.
View supporting evidence
“supporting key standards and regulatory frameworks such as NIS Regulations, CAF / eCAF, NIST 800-53, ISO27001 and Cyber Essentials+ and MITRE ATT&CK”.
Supplier eligibility requirements
99% confidence
Unknown.
View supporting evidence
No eligibility requirements are stated in the supplied planning notice.
COMMERCIAL AND DELIVERY
Contract intelligence
Commercial
Commercial input sought
96% confidence
High-level ROM costs and licensing model information.
View supporting evidence
“licensing model ... and high-level ROM costs”.
Contract value
99% confidence
Unknown.
View supporting evidence
No value_min, value_max or currency is supplied.
Delivery
Implementation and technical input
97% confidence
Indicative implementation approach and timescales, integration options and migration requirements are sought.
ProcuraAxis analysis supplements, but does not replace, the original notice and tender documents. Always verify eligibility, deadlines and commercial terms with the issuing authority.
Continue in your ProcuraAxis workspaceFree account · Full approved analysis