NATO Request for Information: Governance, Risk, and Compliance Tool

The NATO Communications and Information Agency (NCIA) issued this Request for Information (RFI), identified by reference number RFI-07119-GRC, to support the upcoming acquisition of a Commercial-Off-The-Shelf (COTS) Governance, Risk, and Compliance (GRC) tool. This market research effort aims to identify qualified vendors and gather industry input regarding available marketplace capabilities and potential acquisition strategies. Participating organizations are invited to share corporate experience, provide recommendations on draft requirements to improve competition and performance outcomes, and identify risks for consideration during the planning phase.

The Bureau of Industry and Security serves as the publishing agency for this notice, which is classified under NAICS 541519: Other Computer Related Services. While the place of performance is located in Belgium, the agency specifies that responses must be submitted directly to NCIA rather than the Department of Commerce. Detailed submission instructions and requirements are contained in a single attachment titled RFI-07119-GRC.pdf, which was published on May 7, 2026.

Interested parties must submit their responses no later than 12:00 hours Central European Time (CET) on May 29, 2026. This special notice is strictly for planning purposes and does not constitute a request for bids. All associated correspondence must reference the RFI identifier to ensure proper processing by the NCIA.