Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, June 24 at 2:00 PM EDT

Register Free →

This Solicitation opportunity from Government of Canada was posted on January 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Cyber Security Maturity Assessment

Closed
2025-108-AWCanada

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

AI Contract Overview

Show more

Toronto Metropolitan University is seeking proposals for a comprehensive cyber security maturity assessment aligned with the ISO 27002:2022, NIST 2.0 CSF, and CMMI maturity rating frameworks. The assessment will cover the entire University, including multiple departments and faculties. The selected proponent will be designated as the University's preferred supplier for future cyber security maturity assessments during the contract term, which spans three years with two optional one-year extensions. Submission of proposals is electronic, with a deadline of January 21, 2026, and the procurement process includes mandatory evaluation criteria focusing on proposal acknowledgement, information security, and privacy requirements, followed by technical evaluation, presentations, and financial evaluation. The procurement is governed by specific trade agreements relevant to the Canadian public sector, including the Broader Public Sector and the Canadian Free Trade Agreement. Interested suppliers must register on the MERX platform to access the procurement documents, which detail pricing, submission requirements, and procedural specifics. Evaluation criteria prioritize company information, relevant experience, team qualifications, approach and schedule, as well as social and sustainable practices. Proposals will be reviewed in multiple stages with set minimum scoring thresholds for technical and presentation components before financial evaluation. The procurement will result in a Professional Services Agreement as outlined in the provided appendices, with no anticipated negotiations or electronic auction. Suppliers are advised to carefully review the complete procurement documents for the most current information and conditions of participation.

General Info

Toronto Metropolitan University seeks proposals for a three-year ISO 27002:2022 cyber security maturity assessment contract.

Agency

Government of Canada → Toronto Metropolitan University

NAICS

541512 - Computer Systems Design Services View NAICS

Place of Performance

CAN

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PhaseClosed
Posted

Solicitation

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyGovernment of Canada → Toronto Metropolitan University
Contacts1 person available
OfficeN/A
Organization / Agency
Government of Canada → Toronto Metropolitan University
Office AddressN/A
Contacts
Amanda WoodContracting Authority

Full Description

Show more
Notice of Intended Procurement Name of Procuring Entity Toronto Metropolitan University (the “University”) Contact Person and Contract Person Coordinates Amanda Wood, 1 Dundas St West, 16th Floor, Toronto, ON, M5B 2H1, 416-979-5000 ext. 556981 Procurement Documents The procurement documents are available at www.merx.com. Note that obtaining access to the procurement documents will require prospective suppliers to register and pay a registration fee. Pricing and Payment Terms are available on the MERX website. Description of Procurement The University is conducting a Request for Proposals for one (1) cyber security maturity assessment against the ISO 27002:2022 framework, NIST 2.0 CSF Framework and the Capability Maturity Model (CMMI) maturity rating system. The Successful Proponent will also be identified as the University's preferred supplier to perform future cyber security maturity assessments at the University’s sole discretion, for the term of the Final Agreement. The scope of this assessment will be University wide and include several different departments and faculties, as further described in Appendix B. The University intends to execute a Professional Services Agreement provided in Appendix E. The procurement is not anticipated to involve negotiation. An electronic auction is not anticipated. Address and Final Date for Submissions Submissions must be submitted electronically at ttps://tmu.bonfirehub.ca/opportunities/100912 on or before January 21, 2026, at 11:00:00 am. The submissions will not be opened publicly. Conditions for Participation The procurement is subject to the following conditions for participation: Mandatory Submission Requirements File #1 – Proposal Acknowledgement Form Pass/Fail File #2 – Information Security Requirements Pass/Fail File #3 – Privacy Requirements Pass/Fail Minimum Passing Score for Stage 2 - Technical is 36 points out of 60 Minimum Passing Score for Stage 3 - Presentation is 12 points out of 20 The University will base its selection of qualified suppliers on the following criteria: Criteria Weighting (Points) Stage 1 - Mandatory Evaluation Criteria: File #1 – Proposal Acknowledgement Form Pass/Fail File #2 – Information Security Requirements Pass/Fail File #3 – Privacy Requirements Pass/Fail Stage 2 – Technical Evaluation Criteria File #4 - Company Information 5 File #5 – Relevant Experience 20 File #6 – Proponent Team 15 File #7 – Approach & Schedule 15 File #8 – Social and Sustainable Practices 5 Subtotal 60 Stage 3 – Presentation Presentation 20 Subtotal 20 Stage 4 – Financial Evaluation Criteria: Total Price of Initial Assessment – Requested Data 20 TOTAL 100 Applicable Trade Agreements This procurement is subject to the following trade agreement(s): Broader Public Sector (BPS) Canadian Free Trade Agreement (CFTA) Quebec/Ontario Contract Details The term of the Final Agreement is three (3) plus one (1) plus one (1) years. Notes Suppliers should note that information contained within this notice is subject to change. Suppliers are encouraged to obtain the procurement documents which contain the most current information. If there is a conflict between the procurement documents and this notice, the procurement documents will take precedence.Bidding and Documents are available on http://www.merx.com. Fees may apply; See https://www.merx.com/public/pricing for more information.