Governance, Risk and Compliance Audit and Compliance Management Software

The organization seeks software for governance, risk, compliance audit, and compliance management in the Northwest Territories.

Solution components and data must be hosted within Canadian data centers
Provide documented evidence confirming Canadian data residency
Provide written commitment outlining controls and safeguards for data migration
Implement AES-256 encryption for data at rest and TLS 1.2 or higher for data in transit
Maintain current SOC 2 Type II or ISO 27001 certification and provide documentation
Undergo annual third-party penetration testing and provide executive summaries or remediation reports
Maintain immutable audit logs for all system activity relevant to security, access, and administrative functions
Ensure alignment with WSCC IT and security standards during contract finalization
Provide clear termination and offboarding provisions, including timelines, responsibilities, data handling, and support
Acknowledge WSCC retains full ownership and control over all data
Provide evidence of financial stability (audited financial statements, annual reports, credit reports, or equivalent)
Provide a defined Service Level Agreement (SLA) with response and resolution time commitments
Provide secure API capabilities (REST, OData, or equivalent) for integration with WSCC systems
Provide a configurable audit management system with risk, control, and compliance linkages
Provide implementation, migration, and onboarding services for 3 audit team users
Provide training, documentation, and ongoing support
Integrate with Microsoft 365, SharePoint, and key business systems (ERM, Payroll)
Support the full lifecycle of WSCC Internal Audit activities (planning, workpaper management, controls testing, reporting, recommendation tracking)
Enable auditors to create, manage, and maintain annual audit plans in a centralized environment
Support risk-based planning linked to the WSCC corporate risk register
Allow users to define, assign, and track audit schedules, scope, milestones, and resources
Generate dashboards and reports comparing planned versus actual audit performance
Provide a centralized repository for secure storage and retrieval of electronic workpapers
Maintain version control and document history for all uploaded materials
Integrate with Microsoft Excel and Word for audit testing, documentation, and data analysis
Enforce secure file storage and access control based on user roles
Include built-in templates for test scripts and evidence collection
Support execution and documentation of control testing results
Provide automated workflows for review and approval of test results
Generate real-time dashboards and reports on audit progress and findings
Support exporting reports to PDF, Excel, and Power BI formats
Include a module to track audit recommendations through to closure
Allow assignment of actions and due dates to responsible owners
Send automated reminders for overdue items
Provide a centralized repository linking risks, controls, audits, and findings
Support documentation and assessment of compliance obligations
Display dashboards representing organization-wide risk posture
Support structured integration with ERP systems for audit-related financial and transactional data
Support importing payroll or HR data for audit testing and analytics
Support configurable data import processes (e.g., scheduled uploads)
Integrate with Microsoft Outlook for reminders and calendar alignment
Support organizational growth (users, audits, data volume) without performance degradation
Demonstrate a resilient and scalable system architecture
Provide a structured onboarding plan
Provide comprehensive training for all user roles
Provide full implementation support (configuration, migration, integration)
Provide a clearly defined support structure, including escalation pathways and named support contacts
Provide a clearly defined implementation methodology outlining major phases, deliverables, and milestones
Provide a structured data migration strategy describing approach, sequencing, and validation activities
Identify key project risks and corresponding mitigation strategies
Demonstrate experience implementing audit management or governance solutions comparable in size and complexity to WSCC
Provide a clearly structured and transparent licensing model (e.g., user-based, enterprise, or module-based)
Provide a detailed breakdown of onboarding, implementation, and configuration costs
Provide a clear multi-year pricing model outlining annual costs, support fees, and upgrade costs
Provide a 3-5 year Total Cost of Ownership (TCO) projection identifying all anticipated cost components

$100,000 – $500,000

Proposals must be received on or before April 21st, 2026, 2:00 PM local time (MT).

Questions or enquiries must be submitted no later than 5 business days prior to the Proposal Submission Deadline, which is April 14th, 2026.

Workers' Safety And Compensation Commission

Organization overview and procurement intelligence available on paid plans.

A vendor is sought to provide governance, risk, and compliance audit as well as compliance management software. The purpose of this solicitation is to acquire a solution that addresses governance, risk management, and compliance needs for the organization in the Northwest Territories.

Further details about project scope, requirements, and submission guidelines are not available, as the main RFP document has not been included.

Governance, Risk and Compliance Audit and Compliance Management Software

Overview

Fit Score

SUMMARY

KEY REQUIREMENTS

BUDGET

TIMELINE

QUESTION DEADLINE

Issuing Agency

DESCRIPTION

Similar RFPs