Third Party Risk Management Software

The North Dakota University System (NDUS) is seeking a SaaS‑based Third‑Party Risk Management (TPRM) platform to centralize vendor risk data across its 11 institutions, provide configurable risk‑assessment questionnaires, continuous monitoring, analytics, and secure document storage, while meeting strict accessibility, security, and data‑location requirements. The contract will include implementation services, training, and ongoing technical support, with an estimated budget of $25‑$30 K and a phased rollout beginning in October 2026. • Core functional requirements: vendor repository, risk assessment (HECVAT‑aligned), dashboards, workflow, role‑based access, and WCAG 2.1 AA compliance. • Required services: SaaS hosting, implementation (UAT, training), multi‑year support, and professional services. • Mandatory compliance: NDUS data must reside within the continental U.S., PCI‑DSS, cyber‑liability insurance, and a hosting exemption (HECVAT 4). • Timeline: Questions due July 30 2026, proposals due August 17 2026, demonstrations late August/early September, award ~September 22 2026, contract start October 2026.