Project Information

Bid Title

Security Framework Implementation & GRC Compliance

Issuing Agency

Town of Charlestown

Location

Rhode Island

Published Date

Feb 13, 2026

Closing Date

Mar 10, 2026

Government Level

State & Local

Status

Closed

Original Source

Join to Access Full Details

Bid Inquiries

Join to Access Full Details

Bid Documents

Join to Access Full Details

Project Description

Security Framework Implementation & GRC Compliance When:

to Tuesday, March 10, 2026 at 3:00 PM

Town of Charlestown, RI

Invitation to Bid

RFP – Security Framework Implementation & GRC
Compliance

The Town of Charlestown, RI is soliciting sealed proposals for Security
Framework Implementation and GRC Compliance services. Proposals due 3-10-2026
at 3:00 PM to the Town Clerk, 4540 South County Trail, Charlestown, RI
02813. Specs available at www.charlestownri.gov/townbids . No electronic submissions.
The Town reserves the right to reject any/all proposals. Questions: cpancaro@charlestownri.gov .

Bid Specifications

Attachment Preview

Request for Proposals

for

Security Framework

Implementation and GRC

Compliance

Town of Charlestown, RI

For questions or clarifications contact:

Christopher Pancaro

Charlestown IT Manager

Charlestown Town Hall

4540 South County Trail

Charlestown, RI 02813

(401-364-1231)

cpancaro@charlestownri.gov

Table of contents:

Page 1

Page 2

Pages 3

Pages 4-6

Page 7

RFP # cover sheet

RFP Table of Contents & Summary

Submission information

Scope of Work

Proposal Evaluation Scoring

Project Summary:

The Town of Charlestown seeks a comprehensive compliance and risk management

solution tailored to the unique needs of public sector operations. The system will

serve as a centralized hub for monitoring regulatory compliance, managing policies,

and assessing risks. Core capabilities should include streamlined policy

development, incident tracking, workflow automation, real-time monitoring, and

inter-agency collaboration. The goal is to implement a scalable, efficient, and secure

governance, risk, and compliance (GRC) platform that strengthens organizational

resilience and ensures reliable municipal operations, and to adopt a recognized

security framework that provides long-term structure for ongoing compliance and

continuous improvement.

Submission Information

Respondents are asked to submit three (3) copies of their proposals in a sealed envelope, vendors may

include one (1) digital copy on a USB flash drive, clearly marked “RFP- Security Framework and

GRC Compliance Bid” in the lower left corner of the envelope and deliver to The Town Clerk,

Charlestown Town Hall, 4540 South County Trail, Charlestown, Rhode Island 02813. Proposals are

due no later than 3-10-2026 at 3:00 pm. Project Documentation and Specifications are available at

http://www.charlestownri.gov/townbids.

Responses received after the due date will not be opened. Electronic delivery of RFP proposals in

any form is prohibited. The Town of Charlestown reserves the right to reject any and all proposals.

The Town, at its sole discretion, may retain the selected firm to perform any component or all

components of the Security Framework Adoption and GRC Compliance scope of work outlined in this

RFP.

Proposals must be organized in the following structure:

1. Cover Letter and Vendor Information

2. Executive Summary

3. Response to Scope of Work

4. Project Plan and Timeline

5. Company Qualifications and Key Personnel

6. Pricing Proposal

7. References

8. Required Forms and Certifications

9. Vendor Minimum Qualifications

Scope of Work

The selected vendor will provide a comprehensive governance, risk, and

compliance (GRC) solution and related services to support the Town of

Charlestown’s compliance, risk management, and operational needs. The scope of

work includes, but is not limited to, the following:

1. Regulatory Compliance Management

a. Deliver a centralized hub for monitoring, assessing, and managing

compliance requirements to municipal government operations, supported

by ongoing vendor guidance.

b. Ensure adherence to federal, state, and local mandates, including

reporting, audit readiness, and continuous updates as regulations evolve.

c. Provide configurable compliance frameworks with the ability to adapt to

changing regulatory environments and Town-specific requirements.

2. Risk Identification and Assessment

a. Implement tools for identifying, analyzing, and prioritizing

organizational risks, with vendor-supported facilitation of risk reviews.

b. Provide methodologies to quantify potential impacts and likelihoods,

supporting proactive mitigation strategies and risk-informed decision-

making.

c. Deliver dashboards and reports to track risk status, trends, and

remediation progress.

3. Policy and Procedure Management

a. Provide a structured platform for creating, reviewing, approving, and

distributing policies and procedures, including support for mapping

policies to compliance requirements.

b. Enable version control, audit trails, and acknowledgement tracking to

ensure accountability and meet regulatory expectations.

c. Ensure accessibility of policies for all relevant staff and departments,

including scheduled review, and renewal cycles.

4. Audit and Assurance Support

a. Provide a repository for storing, categorizing, and managing audit-

related documentation with vendor assistance in preparing materials.

b. Support internal and external audit processes with tools to track findings,

assign remediation tasks, and generate comprehensive audit reports.

c. Ensure transparent audit trails for compliance validation and evidence

collection.

5. Incident and Issue Tracking

a. Deliver a centralized system to capture and track incidents, issues, and

their resolutions, including compliance-related events.

b. Provide analysis tools to identify root causes, trends, and areas for

improvement, with vendor guidance as needed.

c. Ensure transparency and accountability through structured reporting and

oversight.

6. Workflow Automation

a. Automate routine GRC processes to reduce manual effort and human

error.

b. Provide configurable workflows for approvals, escalations, and task

assignments aligned to the compliance program.

c. Ensure consistency of governance practices across departments and

agencies.

7. Monitoring and Reporting

a. Provide real-time dashboards for key compliance and risk indicators,

highlighting gaps, overdue tasks, and remediation status.

b. Deliver customizable reports for leadership, auditors, and stakeholders,

including scheduled reporting cycles.

c. Enable role-based access to ensure appropriate visibility and separation

of duties across the organization.

Commodity Codes

• NAICS 541519Other Computer Related Services
• NAICS 541618Other Management Consulting Services

* Disclaimer: Government BidHub provides information on bids, RFPs (Requests for Proposals), and RFQs (Requests for Qualifications) solely for convenience and informational purposes. This site is not an official public notice board. For official details, responses, or inquiries, please contact the relevant government agency directly.