NATO Request for Information: Governance, Risk, and Compliance Tool

The NATO Communications and Information Agency (NCIA) has issued a Request for Information (RFI) to identify qualified vendors and gather input on potential solutions to support the upcoming acquisition for a Commercial-Off-The-Shelf (COTS) Governance, Risk, and Compliance (GRC) tool. This RFI is issued for planning purposes only and is not a request for bids. It is part of NCIA’s effort to ensure it has a clear understanding of the marketplace, available capabilities, and potential acquisition strategies.

NCIA invites industry to 1) share relevant corporate capabilities and experience; 2) review and comment on its draft requirements with a view to providing recommendations for improving performance outcomes, competition, and efficiency; and 3) identify any risks or concerns that should be considered during planning. Do NOT submit your RFI response to the Department of Commerce. Submission instructions and additional details can be found in the RFI (attached).

The NCIA reference for this RFI is RFI-07119-GRC, and all correspondence concerning this matter should reference this number. The response deadline is NLT 12:00 hours Central European Time (CET) on 29 May 2026. Your participation in this RFI is greatly appreciated.