Description
North Dakota University System (NDUS) is seeking a fully‑managed SaaS platform to provide comprehensive third‑party vendor risk management for its 11 campuses and associated staff. The solution must support centralized vendor data, configurable risk questionnaires (including HECVAT alignment), continuous monitoring, robust reporting, and role‑based access with SSO integration. Vendors must also deliver implementation services, user‑acceptance testing, training, and ongoing technical support, and must meet stringent security, accessibility (WCAG 2.1 AA) and data‑location requirements. The contract will be a cooperative‑purchasing agreement, with an estimated annual spend of $25‑$30 k and a three‑year term, allowing for 5‑10 % vendor growth each year.
• Provide a hosted SaaS TPRM platform (multi‑institution, multi‑campus) with data segregation and enterprise reporting.
• Deliver implementation, training, UAT, and ongoing support services (remote only).
• Comply with WCAG 2.1 AA, HECVAT, SOC 2, VPAT, and U.S. data‑residency/security standards.
• Offer licensing for ~160 NDUS staff and ~150 vendors, scalable for growth, and submit a cost proposal separating one‑time and recurring fees.