Explanation
BACKGROUND
This ordinance authorizes the Director of the Department of Technology to enter into contract for the procurement of a Governance, Risk, and Compliance (GRC) tool. This procurement falls under the Ohio Revised Code (ORC) 9.64.
The City of Columbus, Department of Technology, seeks to implement a solution to support organizational governance and ensure compliance with the administrative requirements of ORC 9.64. This GRC tool is a customizable platform that will establish an automated framework for the continuous monitoring of organizational controls, the maintenance of a comprehensive risk register, and the systematic tracking of corrective action plans and project milestones. By unifying disparate operational data into auditable workflows, the Department shall ensure transparent internal reporting, risk mitigation, and timely deficiency remediation across all departmental systems.
The Governance, Risk, and Compliance (GRC) implementation represents a strategic technology investment that will establish a foundational cybersecurity and compliance management platform for the City. The initial project includes platform acquisition, implementation services, configuration, workflow development, data integration, and deployment activities necessary to create a long-term enterprise capability supporting cybersecurity governance, risk management, regulatory compliance, corrective action tracking, and continuous monitoring. These implementation activities provide a multi-year benefit to the City by establishing the underlying technology framework that will support ongoing compliance with Ohio Revised Code 9.64 and related cybersecurity initiatives.
Ordinance 0260-2023 authorized the Director of Technology to enter contract with RSM US LLP to provide a review of available software solutions that manage on-going activities necessary to reduce risk and comply with current mandates. As a result of this project, it was determined that the vendor ad...
Click here for full text