Cyber Security Maturity Assessment

Notice of Intended Procurement Name of Procuring Entity Toronto Metropolitan University (the “University”) Contact Person and Contract Person Coordinates Amanda Wood, 1 Dundas St West, 16th Floor, Toronto, ON, M5B 2H1, 416-979-5000 ext. 556981 Procurement Documents The procurement documents are available at www.merx.com. Note that obtaining access to the procurement documents will require prospective suppliers to register and pay a registration fee. Pricing and Payment Terms are available on the MERX website. Description of Procurement The University is conducting a Request for Proposals for one (1) cyber security maturity assessment against the ISO 27002:2022 framework, NIST 2.0 CSF Framework and the Capability Maturity Model (CMMI) maturity rating system. The Successful Proponent will also be identified as the University's preferred supplier to perform future cyber security maturity assessments at the University’s sole discretion, for the term of the Final Agreement. The scope of this assessment will be University wide and include several different departments and faculties, as further described in Appendix B. The University intends to execute a Professional Services Agreement provided in Appendix E. The procurement is not anticipated to involve negotiation. An electronic auction is not anticipated. Address and Final Date for Submissions Submissions must be submitted electronically at ttps://tmu.bonfirehub.ca/opportunities/100912 on or before January 21, 2026, at 11:00:00 am. The submissions will not be opened publicly. Conditions for Participation The procurement is subject to the following conditions for participation: Mandatory Submission Requirements File #1 – Proposal Acknowledgement Form Pass/Fail File #2 – Information Security Requirements Pass/Fail File #3 – Privacy Requirements Pass/Fail Minimum Passing Score for Stage 2 - Technical is 36 points out of 60 Minimum Passing Score for Stage 3 - Presentation is 12 points out of 20 The University will base its selection of qualified suppliers on the following criteria: Criteria Weighting (Points) Stage 1 - Mandatory Evaluation Criteria: File #1 – Proposal Acknowledgement Form Pass/Fail File #2 – Information Security Requirements Pass/Fail File #3 – Privacy Requirements Pass/Fail Stage 2 – Technical Evaluation Criteria File #4 - Company Information 5 File #5 – Relevant Experience 20 File #6 – Proponent Team 15 File #7 – Approach & Schedule 15 File #8 – Social and Sustainable Practices 5 Subtotal 60 Stage 3 – Presentation Presentation 20 Subtotal 20 Stage 4 – Financial Evaluation Criteria: Total Price of Initial Assessment – Requested Data 20 TOTAL 100 Applicable Trade Agreements This procurement is subject to the following trade agreement(s): Broader Public Sector (BPS) Canadian Free Trade Agreement (CFTA) Quebec/Ontario Contract Details The term of the Final Agreement is three (3) plus one (1) plus one (1) years. Notes Suppliers should note that information contained within this notice is subject to change. Suppliers are encouraged to obtain the procurement documents which contain the most current information. If there is a conflict between the procurement documents and this notice, the procurement documents will take precedence.Bidding and Documents are available on http://www.merx.com. Fees may apply; See https://www.merx.com/public/pricing for more information.