Finavia: Risk Management and Occurrence Reporting System

Finavia is an airport company aiming to make travelling smooth. We develop and maintain passenger terminals and the infrastructure required by air traffic. With our partners operating at our airports, we make passenger travel safe and uncomplicated. Finavia's network of airports consists of 20 airports across Finland. Finavia is renewing its Risk Management and Occurrence Reporting System. The system also includes Safety Assessment forms and approvals for change management. The objective of this procurement is to purchase a new system along with the implementation, licenses, and continuous services. The solution should provide easy, efficient, standardized, and secure means for reporting, analysing, and monitoring risks and occurrences and changes in trends. It will improve the effectiveness and impact of safety-related work and provide common situation pictures. The new system must fulfill the requirements that are based on aviation regulations and information security. The system will also include several integrations. The new system will replace and consolidate the existing fragmented tools and solutions used for risk management, occurrence reporting, and safety assessments, providing a common and standardized solution across the organization. The solution must be based on standard product capabilities, including a risk management software (ERM, GRC, SMS, or similar) and/or a task management system. Customer-specific needs should be met primarily through configuration, workflows, or user interface-level solutions, minimizing the need to customize the application core. The new system will be procured with a SaaS model where the new supplier is responsible for planning, building, developing, and operating the system throughout its lifecycle, including the required technical environment. The dashboards and reporting will be delivered partly through existing Business Intelligence software.  The system will serve different kinds of organizational groups, e.g. aviation safety, airport related security operations, cyber security, environmental safety, occupational health and safety, operative work, governance, finance and ESG related risk management. The system has also users from external stakeholders. The implementation will start on January 2027, and the system will be delivered in several phases during 2027-2028, with an option to provide additional features also later on. The additional development may also include leveraging the system for audits. The project work and documentation will be done in Finnish and/or in English. The offer materials must be submitted in Finnish and/or in English.