France – Software package and information systems – Avis de sourcing relatif à la fourniture de solutions de Contrôles /Gestion des risques et de la conformité (GRC) et de la gestion des risques des fournisseurs tiers (TPRM) pour répondre aux besoins potentiels du Groupe La Poste

La Poste is conducting, through this notice, a sourcing exercise to identify market players in the field of « Controls / Risk and Compliance Management (GRC) and Third-Party Risk Management (TPRM) » solutions, and to assess the suitability of these solutions to the constraints/challenges of La Poste Group's Cybersecurity Directorate. To strengthen this oversight, harmonise practices within the various entities of La Poste Group and have a consolidated and shareable vision with governance bodies, the Group Cyber Security Directorate is considering the opportunity to equip itself with a new integrated solution/platform of the Controls, GRC & TPRM type to replace the existing one, which currently covers: - The publication of the PSSI-G, self-assessments; - The Cybersecurity Control Plan with presentation of evidence; - The mapping between the PSSI-G and other frameworks (ISO, NIS2, ANSSI); - The SSI maturity questionnaire with provision of evidence. This new platform must enable the coverage of the entire lifecycle of controls, compliance obligations, and the management of exposure to third-party risks, by integrating into the IT ecosystem of La Poste Group and meeting the high requirements in terms of security, confidentiality and regulatory compliance.