Overall Programme Health
Award decision open
Three executive decisions outstanding since 26 Feb 2026 with no recorded resolution.
Programme Status Report
Status Dashboard — Contoso | RFP-2026-001 | Finance, HR & CRM (SaaS) | EMEA
This dashboard reflects the most recent programme records held in Microsoft 365. The latest substantive record is the vendor offer analysis dated 26 February 2026. No programme email, Teams channel posts, calendar events or meeting transcripts were found after that date, so the award decision is shown as still open. Status ratings reflect that last recorded position, not confirmed present-day progress.
Overall Programme Health
Award decision open
Three executive decisions outstanding since 26 Feb 2026 with no recorded resolution.
Budget
€390,000 vs €250,000
Lowest compliant bid is 56% over the approved budget. All three bids exceed budget.
Schedule
24-month clock not started
Go-live is 24 months from contract signature; contract not recorded as signed.
Scope
Finance, HR, CRM — ~350 users
Greenfield SaaS across EMEA; existing ERP not migrated. Confirmed in the Statement of Work.
Vendor Selection
ERPMax Solutions, 86/100
Recommended preferred vendor, subject to budget resolution. Approval not recorded.
Compliance
ISO 27001 + SOC 2 Type II
ERPMax certified on both. GDPR and EMEA data residency validation still pending due diligence.
Approval required from Corey Gray (Procurement Lead), Finance Director, Legal Counsel, CISO and the Executive Sponsor.
| Phased CRM deployment | −€50,000 |
| Initial user count at 280 | −€30,000 |
| Negotiated discount 10–15% | −€40,000 to −€60,000 |
| Revised total | €250,000 – €270,000 (on target) |
Track A
Track B
| ID | Risk | Severity | Owner | Mitigation / current position |
|---|---|---|---|---|
| R1 | Budget overrun — all three bids exceed the €250,000 budget; lowest compliant offer is €390,000 (+56%) | High | Corey Gray + Finance Director | Option D hybrid negotiation targeting €250k–€270k |
| R2 | Stalled award — three executive decisions outstanding since 26 Feb 2026 with no recorded resolution | High | Executive Sponsor | Convene decision forum; every downstream milestone depends on this |
| R3 | Commercial risk on preferred vendor — rated Medium in the evaluation risk matrix, the only non-low rating for ERPMax | Medium | Procurement Lead + Legal Counsel | Milestone-based payment schedule under negotiation |
| R4 | Data sovereignty — ERPMax EMEA data centres are Frankfurt, Amsterdam and Dublin; the Statement of Work requires GDPR compliance and EMEA data residency | Medium | CISO + Compliance Officer | Weeks 3–5 due diligence; residency alone may not establish sovereignty (see external signals) |
| R5 | Reserve-vendor roadmap dependency — IntegraPro's supplier portal is only acceptable if delivery is contractually guaranteed by Q3 2026 with penalties | Medium | Legal Counsel | Applies only if the reserve option is invoked |
| R6 | SLA enforcement — penalty regime is proposed, not yet contracted | Medium | Legal Counsel | Proposed: critical 1-hour response (€5,000 per hour delay), high 4-hour response (€2,000 per hour delay), €10,000 per week of delay beyond Month 24, capped at 20% of implementation cost |
| R7 | Disqualified bidder re-entry — CloudFirst ERP fails mandatory real-time processing, ISO 27001 pending, SOC 2 Type II missing, no SLA penalty clauses | High if reconsidered | Procurement Lead | Formal disqualification recommended and awaiting confirmation |
| R8 | Programme reporting gap — no status posts in the FCS Application Upgrade or Absolute Technology R400 Infrastructure Teams channels, no meeting transcripts and no governance meetings on the calendar | Medium | Corey Gray / PMO | Stand up the steering committee cadence required by Statement of Work, Section 2.1 |
| Vendor | Technical /40 | Commercial /25 | Risk /20 | Compliance /15 | Total /100 | Total cost | vs €250k budget | Status |
|---|---|---|---|---|---|---|---|---|
| ERPMax Solutions | 38 | 15 | 18 | 15 | 86 | €390,000 | +56% | Recommended |
| IntegraPro Systems | 34 | 10 | 14 | 15 | 73 | €450,000 | +80% | Conditional reserve |
| CloudFirst ERP | 22 | 18 | 10 | 8 | 58 | €290,000 | +16% | Disqualify |
Evaluation weighting — technical capabilities 40%, commercial terms 25%, risk and vendor stability 20%, CSR and compliance 15%. ERPMax cost breakdown: implementation €156,000, year-one licensing €136,500, three-year support €97,500.
The gap between initial vendor quotes and final project costs routinely lands between 50% and 200%, and budget overruns derail roughly 55% of ERP projects. Software subscription typically represents only 20–30% of total project cost, and hidden costs such as data cleansing, change management and post-go-live stabilisation add a further 15–25%.
What it means for usThe ERPMax bid at +56% sits inside the normal quote-to-actual gap. The €250,000 baseline looks more like an under-scoped estimate than the bids looking expensive.
A realistic ERP implementation timeline runs 3–9 months for SMEs, 6–12 months for mid-market companies and 12+ months for large enterprises; staged rollouts by function or site typically run 9–18 months.
What it means for usThe two-wave plan — Finance and HR at Month 18, CRM at Month 24 — carries genuine schedule headroom, which supports the phased element of Option D rather than threatening it.
As of mid-2026 all three major ERP platforms surface generative AI for finance close, invoice extraction, forecasting and conversational support — reducing manual variance but adding new governance considerations. Mandatory e-invoicing, digital tax controls and ISSB/ESG reporting have become operational priorities that the ERP must feed.
What it means for usThe evaluation credited ERPMax for AI-driven automation, but the Statement of Work contains no AI governance or explainability clause. Worth adding before contract finalisation in Weeks 6–7.
SAP, Oracle and Microsoft are racing to embed autonomous AI agents into the core ERP layer. At SAP Connect 2025 SAP unveiled 14 new Joule Agents spanning finance, HR, procurement, supply chain and industry-specific scenarios; its Cash Management Agent reduces manual cash positioning time by up to 70% according to SAP research using customer data.
What it means for usCapability that did not exist when the RFP was written is now shipping. A roadmap and release-adoption clause with the selected vendor protects against buying a platform that falls behind.
A US company operating a data centre in Frankfurt still falls under US jurisdiction through the CLOUD Act and FISA. True GDPR compliance requires both that data is physically located in the EU and that it is processed by an entity subject to EU law rather than the laws of a third country.
What it means for usERPMax's Frankfurt, Amsterdam and Dublin data centres satisfy the residency wording in the Statement of Work but do not by themselves establish sovereignty. This belongs in the Weeks 3–5 security and compliance due diligence, not after signature.