Cybersecurity GRC SaaS Solution

Canada Mortgage and Housing Corporation is seeking a cloud-based cybersecurity governance, risk, and compliance solution with implementation, integration, data migration, training, support, and maintenance services for an initial five-year term with two optional renewal years.

Government of Canada > Canada Mortgage and Housing Corporation


General
Open
RFx004510
Sep 28, 2026 06:00 PM
Aug 21, 2026 12:00 PM
5 years base + 2 × 1 year options
Request for Proposal (RFP)
Federal
Secret
Ask AI about this solicitation
Original Solicitation Links
Contact
ccbrown@cmhc-schl.gc.ca
+16137482534
700 Montréal Road, Ottawa, ON, Canada
Submission Instructions
Email

or

Email
Description

Canada Mortgage and Housing Corporation is seeking a fully configured, cloud-based software-as-a-service solution for cybersecurity governance, risk, and compliance. The solution must support policy and controlled-document management, customizable governance and control frameworks, cyber risk registers and assessments, regulatory compliance mapping and gap analysis, audit evidence collection, risk modeling, dashboards, reporting, workflow automation, role-based access control, and integrations with enterprise systems including SIEM, IAM, CMDB, ERP, and HR platforms. The scope includes implementation and configuration, integration, migration of legacy audit and risk data, testing, training, documentation, technical support, customization, and ongoing maintenance. The solution must support Canadian data residency, encryption, audit logging, privacy and security safeguards, English and French, and future vendor-risk and business-continuity use cases. Proponents must provide detailed technical and rated responses, Canadian client references, security certifications or equivalent attestations, pricing, and a live software demonstration. The resulting agreement is expected to run for five years, with two optional renewal years.

Classification Codes
NAICS541519Other Computer Related Services
PSCDJ01Support services focused on supporting security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.
Smart Codes
cybersecurity grc softwaresaas implementation servicescyber risk compliance consulting
Specifications
Supply & Service
No
Timeline
Aug 21, 2026-Publication Date
Sep 18, 2026-Deadline for Enquiries
Sep 22, 2026-Deadline for Issuing Addenda or Responses to Enquiries
Sep 28, 2026-Proposal Submission Deadline
Sep 28, 2026-Proposal Evaluation
Oct 19, 2026-Presentations Relating to Proposal Evaluation (optional)
Presentations are scheduled during October 19–23, 2026, and will take place by video conference using Microsoft Teams. Attendance applies only to proponents invited after the preceding evaluation stages.
Oct 28, 2026-Notification of Selection of Top-Ranked Proposal
Oct 28, 2026-Estimated Services Agreement Negotiation Period
Dec 1, 2026-Estimated Execution of Services Agreement and Contract Award Notice
Requirements
Required
  • Commercial General Liability — $5,000,000.00
  • Technology Errors & Omissions Liability — $10,000,000.00
  • Computer Security and Privacy Liability (Cyber Liability) — $20,000,000.00
  • Automobile Liability — $2,000,000.00
  • Workers' Compensation
Scored
  • Minimum 3 references
  • Within the last 5 years
'Other Computer Related Services' Opportunities
Software Systems Development, Maintenance, and Support Services

The South Coast Air Quality Management District is seeking qualified contractors for software system...

Due in 2 monthsSouth Coast Air Quality Management District
IT Support Services IDIQ Contract

The Social Security Administration is seeking multiple-award IDIQ contracts for agency-wide IT suppo...

Due in 6 daysUnited States of America > SOCIAL SECURITY ADMINISTRATION > SSA OFC OF ACQUISITION GRANTS
On-Demand IT Support Services

Sûreté du Québec is seeking providers for on-demand office-support technical services across basic, ...

Due in 17 daysQuebec > Sûreté du Québec
USAFoodsafety Application Maintenance and Offline Module Upgrade

The West Virginia Department of Agriculture is requesting maintenance and support for the USAFoodsaf...

Due in 8 daysWest Virginia > West Virginia Department of Agriculture
Enterprise Backup and Disaster Recovery Services

The Pacific Community is seeking enterprise backup, recovery, disaster recovery, and recoverability ...

Due in 12 daysSecretariat of the Pacific Community
Computerized Maintenance Management System

Fairfax County Public Schools is seeking information from computerized maintenance management system...

Due in 27 daysFairfax County Public Schools
Managed Information Technology Services

The Biloxi Housing Authority is seeking qualified, licensed, and insured entities to provide managed...

Due in 7 daysBiloxi Housing Authority
Information Technology Support Services

The Yakima Housing Authority is requesting sealed proposals for information technology support servi...

Due in 21 daysYakama Nation
Information Technology Professional Services Retainer Contract

The State of Vermont is seeking IT vendors for prequalification under a retainer contract covering n...

Due in 10 daysVermont > Department of Buildings and General Services > Office of Purchasing and Contracting
Computer and Information Systems Support Services

The Santa Fe Civic Housing Authority is seeking proposals for computer and information systems suppo...

Albuquerque Housing Authority
WorkSafeBC Cloud Backup Solution

WorkSafeBC is seeking a cloud-based backup solution with professional services for planning, impleme...

Due in 3 daysBritish Columbia > WorkSafeBC
Town IT Services

The Town of Grand Isle is requesting proposals for IT services.

Town of Islip
Cummins Insite Pro Licenses, Maintenance, and Support

The Texas Department of Transportation is seeking Cummins Insite Pro licenses with ongoing maintenan...

Due in 10 daysState of Texas > Texas Department of Transportation
JDE EnterpriseOne Financial System Hosting Services

The Connecticut Airport Authority is seeking a firm to host and provide managed services, administra...

Due in 15 daysConnecticut Airport Authority
Cloud Backup Solution and Implementation Services

WorkSafeBC is seeking proposals for a robust cloud-based backup solution with professional services ...

Due in 3 daysBritish Columbia > WorkSafeBC
Education Command Information Technology Support Services

The United States Marine Corps Education Command is seeking a Women-Owned Small Business to provide ...

Due in 12 monthsUnited States of America > DEPT OF DEFENSE > DEPT OF THE NAVY > COMMANDER (MCINCR-MCBQ)
Managed IT Services for Community Corrections Center

Mobile County is seeking fully managed information technology services for the Mobile County Communi...

Mobile County Commission
Miscellaneous Services, Repairs, Maintenance, and Installation - District Wide

Humble Independent School District is seeking qualified vendors to provide miscellaneous services, r...

Due in about 1 monthHumble Independent School District
Student and Employee Computer Devices

Hillsborough County Public Schools is seeking primary and secondary contractors to supply, configure...

Due in 15 daysBeaufort County > Procurement Services Department
Veeam Data Platform Subscription Renewal and Support

Chatham County is seeking bids for a one-year renewal of Veeam Data Platform Advanced Universal Subs...

Due in 7 daysChatham County
Managed IT and Security Services

The City of McCleary is seeking a managed services provider for co-managed IT support, cybersecurity...

Due in 8 daysCity of Pullman
Software Services and Licensing

Harris County Department of Education is seeking proposals from qualified providers for on-demand so...

Due in 14 daysHarris County Department of Education
Digital Computer Repair

The U.S. Navy is requesting firm-fixed-price repair of a COMPUTER,DIGITAL item, including inspection...

Due in 17 daysUnited States of America > DEPT OF DEFENSE > DEPT OF THE NAVY > NAVSUP WEAPON SYSTEMS SUPPORT MECH (NAVSUP WSS MECHANICSBURG)
Advanced Customer Support Services

The Government of Canada is seeking information from businesses capable of providing advanced custom...

Due in 3 daysGovernment of Canada > Department of Public Works and Government Services > Department of Employment and Social Development
Comments
Correspondences
Custom Fields