Cybersecurity Compliance and ITSG-33 Assessment

The contract involves providing independent validation and ongoing support to ensure compliance with the Government of Canada's IT Security Risk Management framework, specifically adhering to the ITSG-33 PBMM (Protected B) security requirements. This includes conducting audits, preparing necessary documentation, and assisting with continual compliance efforts, aimed at maintaining the security posture within the Protected B classification. The scope of work focuses on cybersecurity compliance and ITSG-33 assessment, reinforcing the security standards mandated for sensitive federal information systems. This subcontract opportunity is issued by the Courts Administration Service under the Government of Canada and is intended to serve the National Capital Region (NCR). Solicitation responses are due by mid-May 2026, with the contract categorized under the professional, scientific, and technical services industry (NAICS 541618). The goal is to engage an experienced service provider familiar with federal IT security frameworks to facilitate independent validation and streamlined compliance processes, supporting the Courts Administration Service in meeting rigorous cybersecurity requirements.