EGB FY25 RFI (FR#10358411), Security Risk Assessment

The State of Colorado’s Office of Information Technology (OIT) is seeking information about IT Risk Management Platforms for Security Risk Assessment. The goal is to learn about risk tools in the market and how they can help accelerate the maturation of risk management programs and activities. The ideal tool should enable the state to perform risk assessments for both third-party and internal systems. Vendors are invited to submit responses and participate in demos to showcase their proposed solutions. Key aspects of the project include: • Market research for IT Risk Management Platforms • Security Risk Assessment capabilities • Support for tracking activities end-to-end • Quantitative analysis of risk for reporting • Ability to perform risk assessments for third-party and internal systems • Demos of proposed solutions