NATO Request for Information: Governance, Risk, and Compliance Tool

The NATO Communications and Information Agency (NCIA) has issued this Special Notice, identified by solicitation number RFI-07119-GRC, to gather market research for a forthcoming acquisition of a Commercial-Off-The-Shelf (COTS) Governance, Risk, and Compliance (GRC) tool. This Request for Information (RFI) serves as a planning tool to identify qualified vendors and understand available marketplace capabilities and acquisition strategies. The primary objectives are to collect information on corporate experience, solicit industry feedback on draft requirements to improve performance and competition, and identify potential risks or concerns for consideration during the planning phase.

The Bureau of Industry and Security is facilitating the distribution of this notice, which is classified under NAICS code 541519 for Other Computer Related Services. While the place of performance is designated as Belgium (BEL), respondents must follow specific submission instructions provided in the single attached document, RFI-07119-GRC.pdf, rather than submitting materials to the Department of Commerce. All correspondence must reference the NCIA identifier RFI-07119-GRC.

Responses to this RFI are due no later than 12:00 hours Central European Time (CET) on May 29, 2026. This inquiry is for information-gathering purposes only and does not constitute a request for bids. Participation is voluntary and intended to assist NCIA in refining the scope and efficiency of the eventual procurement process.