The State of North Carolina is in the process of developing plans to replace a legacy application for the creation, maintenance, storage and reporting of Business Continuity Management (BCM) plans with an integrated Emergency Notification System. The State is interested in learning what is available for a combined BCM and Governance, Risk and Compliance (GRC) solution. This Request for Information (RFI) is intended to collect information and recommendations regarding products and/or services which directly address all aspects of Business Continuity Management (i.e.: Business Continuity, Disaster Recovery, Emergency Notification, Business Impact Analysis, Risk Assessment, Testing, Exercising, and Education & Training) and Governance, Risk and Compliance (Vendor Risk Management, Cybersecurity Risk Assessment, can utilize the Unified Compliance Framework, Corrective Action Plan, Workflow Capabilities, and Access Control).