Cybersecurity Threat & Risk Assessment (TRA) and Certification & Accreditation (C&A) Services

The contract seeks subcontractors to provide comprehensive cybersecurity services focused on threat and risk assessments and certification and accreditation for IT systems, strictly adhering to federal security frameworks. The work involves identifying potential cyber threats, evaluating vulnerabilities, developing detailed security documentation, and guiding systems through the formal certification and accreditation process to ensure compliance with national standards. All tasks must be performed in alignment with the Government of Canada’s mandated security protocols and procedures. Performance of the contract is centered in the National Capital Region, and the work is classified as a subcontract under NAICS code 541611, indicating professional scientific and technical services in administrative management. The solicitation was posted on May 28, 2026, with a firm deadline of June 17, 2026, for submissions. While the contracting agency is identified as the Department of Public Works and Government Services, no specific point of contact or additional set-aside provisions are outlined, and the opportunity is open to eligible subcontractors meeting the technical and compliance requirements without geographic or vendor-type restrictions specified.