Cybersecurity Compliance and ITSG-33 Assessment

The contract seeks a subcontractor to provide independent validation and continuous support for compliance with the Government of Canada’s ITSG-33 Protected B baseline security standards, focusing on the Physical and Boundary Management Model. This includes conducting thorough audits to assess adherence to security controls, maintaining detailed documentation to demonstrate compliance, and offering ongoing assistance to address evolving requirements or gaps. The work is critical to ensuring that systems and infrastructure within the scope meet the stringent protection levels mandated for sensitive but unclassified government information. The contract is issued by the Courts Administration Service under the Government of Canada and is classified as a subcontract under NAICS code 541618, which covers other scientific and technical consulting services. Performance is expected to occur within the National Capital Region, and responses are due by May 13, 2026. There is no specified set-aside classification, and the opportunity is open to eligible bidders who can demonstrate expertise in federal cybersecurity frameworks, particularly ITSG-33, with a proven ability to deliver impartial assessments and sustained compliance support.