See More RFPs

Governance, Risk and Compliance Software

Overview


Cybersecurity & Data Privacy
Knoxville, Tennessee, United StatesPosted: August 19, 2026Deadline: September 9, 2026

Settle Signals


Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY


The agency is seeking a scalable GRC software platform supporting hierarchical organizational structures, risk and compliance management, automation, collaboration, reporting, integrations, and strong security controls. The anticipated contract term is three years, with questions due by August 31, 2026.

KEY REQUIREMENTS


CONTRACT DURATION


36 months

TIMELINE


Publication Date: August 17th, 2026

Deadline for Questions: August 31st, 2026

Bidder Submission Due Date: September 9th, 2026

QUESTION DEADLINE


August 31, 2026

CONTACTS


Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

Issuing Agency


The University Of Tennessee

Organization overview and procurement intelligence available on paid plans.
See Issuer Research

DESCRIPTION


The agency seeks a comprehensive Governance, Risk, and Compliance (GRC) software platform for use across its environment. The platform must represent university entities through a hierarchical organizational model, such as system, campus, college, department, and sub-department, and allow assets to be assigned to any level of that hierarchy.

Required capabilities include risk assessments and lifecycle management; control assessments that influence associated risks; control-based compliance assessments for assets and organizational levels; risk and control inheritance; data, assessment, notification, and reporting automation; and questionnaire-based or simplified assessment interfaces. The platform must facilitate collaboration between assessors and respondents through comments, questions, task assignment, mitigation tracking, and issue flagging.

The solution must provide role-based access aligned with the organizational hierarchy, built-in dashboards and reports, flexible filtering across relevant data fields, and visibility into risk posture and compliance status at any organizational level through hierarchical aggregation. It must also integrate with other risk management tools or provide equivalent native functionality, scale across multiple campuses, entities, and assets with a small centralized administrative team, support multi-factor authentication, and maintain a SOC 2 Type II or equivalent attestation. The contract period is three years, and all questions must be submitted by August 31, 2026.

Similar RFPs


Frequently asked questions


When is the submission deadline?
Submissions are due September 9, 2026. Questions must be submitted by August 31, 2026.
Who issued this RFP?
It was issued by The University Of Tennessee. The work is located in Knoxville, Tennessee, United States.
Who is a good fit for this opportunity?
  • Established GRC software provider with enterprise and higher-education experience
  • Demonstrated expertise in risk management, compliance assessments, controls, and workflow automation
  • Scalable SaaS platform supporting complex hierarchical organizations and centralized administration
  • SOC 2 Type II or equivalent security attestation and robust MFA capabilities
  • Experience integrating with risk management and related enterprise systems
  • Strong implementation, training, and ongoing support capabilities

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works