Description: The scope of this acquisition includes: A FedRAMP High-authorized, commercially available cloud GRC/AI compliance automation platform, licensed for use on up to five (5) information systems. Automated generation of FISMA documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and control implementation narratives, with human-reviewable AI- assisted drafting. Automated continuous monitoring evidence collection, control validation, and Plan of Action and Milestones (POA&M) generation, supporting reporting to the Joint Cybersecurity Authorization Management (JCAM) system. Secure, FIPS-validated connectivity between the requiring office's Microsoft 365/Azure environment and the GRC SaaS environment.
Federal · DC, US
Original attachments and procurement documents tied to this bid.
Federal RFP files are for Starbridge customers only.
You can request RFP files from all other buyer types for free on this site.
Decision makers connected to this RFP from Department of Commerce.
Adjacent opportunities open for bidding right now.
School DistrictMN
Posted
Sep 10, 2026
Oct 23, 2026
Cloud-based enterprise resource planning (ERP) software-as-a-service (SaaS) platform supporting finance, human resources, payroll, position control, time and attendance, budgeting, reporting, and workflow management. MPS will continue utilizing infinite campus as its student information system (SIS).
Higher EducationFL
Posted
-
Oct 12, 2026
Provide a consolidated, enterprise-grade solution for telephony and video collaboration through a cloud-based communications platform.
Special DistrictTN
Posted
Aug 23, 2026
Oct 8, 2026
EPB seeks a solution to automate the internal audit lifecycle, including annual and individual audit planning, audit testing with analytics, and reporting. The solution must integrate enterprise risk management and compliance capabilities, including corporate risk assessments, leadership dashboards and reporting, policy administration, and support for frameworks such as NIST CST, NIST 800-53, COSO Internal Controls Framework, and SOC 2. Third-party vendor management must support exchanging questionnaires, securely storing vendor audit reports, and managing vendors throughout the contract lifecycle.
CityCO
Posted
Sep 25, 2026
Oct 14, 2026
Provide a software as a service (saas) grc solution to replace the existing onetrust system in use by the information security office.
