Cyber Assessment Software solution for St James's Hospital

Description

We - St James's Hospital, Dublin, Ireland (SJH) - are looking for an off the shelf SaaS solution to help us track our initial, current and target cyber security posture against the NIST 2.0 cyber security framework. It must be an application made for this use case, rather than a customised one (such as a generic form/survey solution). The solution must allow us to scale up from 12, to over 500 profile scopes over time. These will be completed internally by IT, internally by other departments, and by external vendors, with appropriate RBAC built in. We should be able to consolidate assessments, creating an end to end view of a service and/or business function. The assessment must have pre-populated questions that enable recipients to answer in a consistent manner that will result in a NIST CSF posture, automatically mapped to NIS2 as controls become agreed on. Please respond to this Preliminary Market Consultation via the eTenders messaging tool if you have a solution that meets these minimum requirements. We - St James's Hospital, Dublin, Ireland (SJH) - are looking for an off the shelf SaaS solution to help us track our initial, current and target cyber security posture against the NIST 2.0 cyber security framework. It must be an application made for this use case, rather than a customised one (such as a generic form/survey solution). The solution must allow us to scale up from 12, to over 500 profile scopes over time. These will be completed internally by IT, internally by other departments, and by external vendors, with appropriate RBAC built in. We should be able to consolidate assessments, creating an end to end view of a service and/or business function. The assessment must have pre-populated questions that enable recipients to answer in a consistent manner that will result in a NIST CSF posture, automatically mapped to NIS2 as controls become agreed on. Please respond to this Preliminary Market Consultation via the eTenders messaging tool if you have a solution that meets these minimum requirements.