WorkCover Queensland goes to market for enterprise GRC platform

WorkCover Queensland has gone to market for an enterprise governance, risk and compliance (GRC) platform, seeking both a software-as-a-service product and an implementation partner to replace the system it has run since 2019.

The government-owned statutory body has provided workers’ compensation insurance in Queensland since 1997, insuring around 180,000 employers along with 35,000 household and individual policyholders, and processing about 95,000 claims a year.

Its current GRC platform is used only for a narrow set of registers - audit findings and actions, conflicts of interest, and gifts and benefits.

Through the tender, WorkCover wants to move to a central suite of core GRC capabilities that give an end-to-end view of enterprise risk management and support what it calls proactive, risk-based decision-making, tied to its WorkCover 2030 strategy.

The stated objective is to source and implement an enterprise GRC SaaS platform that meets current operational needs while providing a scalable foundation for future capability uplift, implemented in a way that maximises out-of-the-box functionality and minimises future rework.

WorkCover’s current GRC contract expires on 31 July 2027, and the agency wants a replacement solution - including any transition - secured by 30 June 2027.

Other objectives include addressing technology constraints as its risk-management practices mature, delivering value for money through a competitive process, and establishing a scalable platform that improves visibility of risks and obligations.

The opportunity is structured in bundles.

Bundle 1 covers the GRC SaaS platform itself, together with ongoing platform-level (Level 4) support under the SaaS model - maintenance, upgrades and enhancements - and solution-level (Level 3) managed services including incident management, break-fix restoration, application performance management and improvement recommendations.

Bundle 2 covers implementation services to move WorkCover from its current system to Phase 1 of the new one: design, build and integration, unit and system testing, data-migration support where required, and defect resolution.

Suppliers must respond to both bundles, with WorkCover stating that a response to only one will not be evaluated. The platform and implementation components will, however, be assessed independently - and potentially sequentially, with the platform evaluated first.

An optional third bundle covers future platform uplift as WorkCover’s risk capability matures under the 2030 strategy, though responses to it will not be formally evaluated.

The tender closes on 7 September 2026 at 3:00 PM.

Last year, WorkCover Queensland released a request for expressions of interest around its core applications and implementation services.