Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Data Security & Privacy Compliance Services

Active

International

Response Deadline09/01/2026, 04:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Government of Canada → Canada Mortgage and Housing CorporationView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Canada, CAN

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 28

subcontract

Response DeadlineSep 1

Submission deadline

Response Deadline

09/01/2026, 04:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyGovernment of Canada → Canada Mortgage and Housing Corporation

ContactsNo contacts available

OfficeN/A

Organization / Agency

Government of Canada → Canada Mortgage and Housing Corporation

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implementation and maintenance of safeguards to protect CMHC’s protected information, including annual penetration testing, data residency enforcement, and compliance with PIPEDA and Appendix E obligations.

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance and CUI SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 Revision 2 controls to safeguard Controlled Unclassified Information within the contractor’s systems and environments. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI in alignment with federal cybersecurity standards. The contractor must also comply with incident reporting requirements mandated by DFARS 252.204-7012, ensuring timely notification and remediation of any cybersecurity events affecting CUI. All activities must be performed under a Total Small Business Set-Aside, reserved exclusively for small businesses as defined by the SBA, and the work is classified under NAICS code 541512 for Computer Systems Design Services. The contract is structured as a subcontract and is associated with the Department of Defense’s Land Supply Chain organization. Responses must be submitted by the deadline of August 28, 2026, with the expectation that performance will occur within the defense supply chain environment.

LAND SUPPLY CHAIN

POSTED

about 12 hours ago

DEADLINE

Cybersecurity Compliance & CMMC Level 2 ImplementationThe contract requires the implementation and ongoing maintenance of CMMC Level 2 compliance across all IT systems involved in manufacturing, documentation, and shipment processes, ensuring alignment with NIST SP 800-171 security controls. This includes establishing, documenting, and enforcing policies and procedures to protect controlled unclassified information, conducting regular assessments to validate control effectiveness, and maintaining readiness for third-party CMMC audits. The scope also mandates immediate cyber incident reporting in accordance with federal requirements, with defined workflows for detection, response, containment, and reporting to appropriate authorities. The contract is structured as a subcontract under the Department of Defense’s ASC Commodities Division and is linked to NAICS code 541512, indicating a focus on computer systems design services. It was posted on July 29, 2026, with a response deadline of August 11, 2026, and the place of performance is unspecified but tied to operational systems supporting manufacturing and logistics functions. Compliance is not a one-time effort but requires continuous monitoring, documentation updates, personnel training, and adaptation to evolving threats or regulatory changes to sustain CMMC Level 2 certification throughout the contract lifecycle.

ASC COMMODITIES DIVISION

POSTED

about 12 hours ago

DEADLINE

Cybersecurity and Controlled Unclassified Information (CUI) SafeguardingThe contract requires the implementation of NIST SP 800-171 safeguards to protect Covered Defense Information, encompassing the development of a comprehensive System Security Plan, enforcement of strict access controls, and establishment of protocols for timely incident reporting. All security requirements must be fully aligned with federal standards for safeguarding Controlled Unclassified Information, ensuring that systems and processes are configured to mitigate risks associated with unauthorized access, disclosure, or compromise. The scope includes not only the primary contractor’s environment but also mandates the flow-down of these cybersecurity obligations to all subcontractors, requiring consistent compliance across the entire supply chain. This subcontract, issued by the Department of Defense’s ASC Commodities Division under NAICS code 541512, is focused on cybersecurity services for defense-related information systems. The response deadline is August 12, 2026, with the solicitation posted on July 29, 2026, indicating a compressed timeline for qualification and proposal submission. Performance is expected to support DoD missions where the protection of sensitive data is critical, and all parties must demonstrate proven capability in implementing and maintaining NIST 800-171 controls without exception. Failure to meet these requirements may result in noncompliance penalties or termination of contractual obligations.

ASC COMMODITIES DIVISION

POSTED

about 12 hours ago

DEADLINE

Cybersecurity Compliance & NIST SP 800-171 Assessment SupportThe contract seeks to secure advisory and implementation support to achieve NIST SP 800-171 compliance for a Department of Defense entity, specifically the ASC Commodities Division. The scope includes developing a System Security Plan, managing the Plan of Action and Milestones, and preparing the organization for a CMMC Level 2 third-party assessment. The work requires deep expertise in cybersecurity frameworks and hands-on experience guiding contractors through the entire compliance lifecycle from documentation to readiness evaluation. All tasks must be performed under the strict guidelines of NIST standards and aligned with the requirements of the Cybersecurity Maturity Model Certification program. This is a total small business set-aside under the SBA program with a NAICS code of 541512, indicating it is scoped for information technology consulting services. The solicitation was posted on July 29, 2026, with a response deadline of August 11, 2026, and is structured as a subcontract. Performance location details are unspecified, but the work is tied to the defense supply chain operations managed by the ASC Commodities Division. The contract is managed through the DLA DIBBS platform and targets qualified small businesses capable of delivering rapid, effective cybersecurity compliance support under tight timelines and stringent DoD requirements.

ASC COMMODITIES DIVISION

POSTED

about 12 hours ago

DEADLINE

Software Licensing Resale and Integration SupportNASA is seeking a subcontractor to resell, configure, and integrate ZCOV v1 software licenses into its IT environment, with full responsibility for activation, deployment planning, and seamless alignment with existing systems. The work requires technical expertise in software licensing workflows, system integration, and mission-critical IT infrastructure support, specifically tailored to meet NASA’s operational needs in Houston, Texas. The contract focuses on ensuring proper licensing compliance, system compatibility, and timely deployment without disruption to ongoing missions or IT services. All activities must be executed under the NAICS code 541512 for computer systems design services, with responses due by August 3, 2026.

NASA Shared Services Center

POSTED

about 17 hours ago

DEADLINE

Secure KVM & Peripheral Sharing System ImplementationThe contract specifies the installation and configuration of NIAP v4.0 certified Dual-Head Secure KVMs designed to enable seamless, zero-gap switching between secure networks, ensuring strict separation and integrity of classified and unclassified data streams. These KVM systems must meet rigorous National Information Assurance Partnership certification standards, guaranteeing they are validated for use in high-security defense environments where unauthorized data transfer or cross-contamination is not tolerated. The solution requires precise hardware integration, secure firmware configuration, and compliance with DoD cybersecurity protocols to ensure operational reliability and audit readiness. This subcontract is set for performance at Spangdahelm Air Base with a zip code of 54529 and falls under NAICS code 541512 for computer systems design services. The opportunity was posted on July 29, 2026, with responses due by August 12, 2026, and is issued under the Department of Defense through the FA5606 52 Cons Da Lgc agency. The work involves full deployment of secure peripheral sharing infrastructure, including testing and validation processes to confirm zero-latency switching between networks without compromising security posture, and must be executed in accordance with mandatory government standards for information assurance and physical data protection.

FA5606 52 Cons Da Lgc

POSTED

about 17 hours ago

DEADLINE

System Integration (APIs, Data, Legacy Systems)The contract seeks to integrate the Army Contract Writing System with legacy Department of Defense systems such as the Wide Area WorkFlow and the Global Combat Support System-Army through secure API connections, requiring comprehensive data mapping and real-time synchronization to ensure seamless information exchange. The effort is focused on enabling reliable, consistent, and secure interoperability between modern and existing platforms to support accurate, timely contract and financial data processes across Army logistics and acquisition functions. This is a subcontract opportunity posted under NAICS code 541512 for systems integration services, with a response deadline of August 11, 2026. The contracting activity is managed by the Department of Defense under the office identified as W6QK Acc-Ri, and performance is expected to support enterprise-level defense operations. While specific location details are not provided, the work is tied to critical Army systems that operate nationwide and require compliance with federal security and data integrity standards.

POSTED

about 17 hours ago

DEADLINE

Application Modernization / Configuration (Low-Code/No-Code Platform)The contract entails the modernization of legacy Java and .NET applications by migrating and refactoring them onto the ACWS low-code/no-code platform, with integrated workflow automation and artificial intelligence/machine learning capabilities. This effort aims to enhance system agility, reduce technical debt, and improve operational efficiency through streamlined processes and intelligent automation without requiring extensive custom coding. The work will focus on reconfiguring existing applications to leverage the platform’s visual development tools, pre-built components, and AI-driven features to deliver scalable, maintainable solutions aligned with modern enterprise standards. The opportunity is structured as a subcontract under the Department of Defense, specifically managed by W6QK Acc-Ri, and is classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 29, 2026, with a response deadline of August 11, 2026. While the place of performance and point of contact details are unspecified, the project requires technical expertise in legacy system decomposition, low-code platform configuration, workflow orchestration, and AI/ML integration. Contractors must demonstrate proven experience in similar modernization initiatives and the ability to deliver secure, compliant solutions within a defense environment.

POSTED

about 17 hours ago

DEADLINE

IPv6-Compliant IT Systems IntegrationThe contract entails the design, supply, and integration of IPv6-compliant IT systems and network infrastructure for Brookhaven National Laboratory, a U.S. Department of Energy contractor. The work must ensure full compatibility with IPv6 standards to support modern networking requirements, including scalable addressing, enhanced security, and improved performance across laboratory operations. The place of performance is specified as Upton, New York, with a ZIP code of 11973, indicating the physical location where the systems will be deployed and integrated. The contract is classified as a subcontract under NAICS code 541512, which corresponds to computer systems design and related services. The solicitation was posted on July 29, 2026, with a strict response deadline of August 10, 2026, at 9:00 PM Eastern Time, requiring potential offerors to submit proposals within this narrow window. No set-aside provisions or additional agency contact details are provided, and the point of contact information is omitted from the posting.

Brookhaven National Labor -Doe Contractor

POSTED

about 17 hours ago

DEADLINE

IT Systems Integration and On-Site Installation SupportThe contract involves the on-site installation, configuration, and integration of upgraded PACS security servers and storage systems at the Marion VA Medical Center in Illinois, with delivery code 62959. The work includes all necessary cabling, network connectivity setup, and comprehensive system testing to ensure seamless operation within the existing infrastructure. This effort is essential to enhance data security and system reliability for medical imaging services at the facility. The contract is classified as a subcontract under NAICS code 541512 for other computer-related services and was posted on July 29, 2026, with a response deadline of August 7, 2026. It is managed by the Department of Veterans Affairs through the 255-NETWORK Contract Office 15, and performance is required exclusively at the Marion location. All work must be conducted on-site, requiring the contractor to coordinate directly with facility staff, adhere to federal security protocols, and deliver fully functional and tested systems within the specified timeframe.

255-NETWORK Contract Office 15 (36C255)

POSTED

about 17 hours ago

DEADLINE

Section 508 Accessibility & Usability TestingThe contract seeks qualified vendors to perform testing and validation of software, documents, and digital interfaces to ensure full compliance with Section 508 accessibility standards, guaranteeing usability for individuals with disabilities. The work involves rigorous evaluation of digital assets to meet federal accessibility requirements, with a focus on functionality, compatibility with assistive technologies, and adherence to established guidelines for inclusive design. All deliverables must demonstrate measurable compliance outcomes and provide detailed documentation of test results and remediation efforts. This is a subcontract opportunity issued by the Department of Homeland Security’s Departmental Operations Acquisitions Division I, with performance expected in Washington. The solicitation was posted on July 29, 2026, and responses are due by August 3, 2026. The North American Industry Classification System code is 541512, indicating it falls under computer systems design and related services. There is no set-aside designation specified, and no point of contact information is provided in the solicitation data. Interested parties must submit proposals through the designated SAM.gov portal before the deadline.

Departmental Operations Acquisitions Division I

POSTED

about 17 hours ago

DEADLINE

Security Incident Response & ReportingThe contract requires rapid detection, containment, and reporting of security incidents involving Controlled Unclassified Information or Personally Identifiable Information, with clearly defined service level agreements mandating strict timelines for notification upon discovery of any breach or compromise. The response must be immediate and coordinated to ensure minimal exposure and regulatory compliance, with emphasis on timely escalation and accurate documentation throughout the incident lifecycle. Contractors must demonstrate proven capabilities in identifying threats targeting sensitive data, implementing effective containment strategies, and delivering notifications within constrained windows to meet federal requirements. This is a subcontract opportunity under NAICS code 541512, issued by the Department of Homeland Security's Departmental Operations Acquisitions Division I, with performance based in Washington. The solicitation was posted on July 29, 2026, and responses are due by August 3, 2026, at 9:00 PM Eastern Time. The contract is not subject to any specific set-aside designation, and while no point of contact information is provided, interested parties must submit proposals through the official SAM.gov portal linked in the posting. All proposals must align with the federal standards for incident response to CUI and PII, and contractors are expected to have infrastructure and personnel capable of 24/7 readiness and compliance with DHS protocols.

Departmental Operations Acquisitions Division I

POSTED

about 17 hours ago

DEADLINE

More opportunities from Government of Canada → Canada Mortgage and Housing Corporation

Same awarding agency

IT Systems & Reporting Platform Support

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

in about 1 month

Accessibility & Official Languages Compliance Services

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month

Business Continuity & Disaster Recovery (BC/DR) Planning

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month

Financial Management & Accounting Services

Offices of Certified Public Accountants

POSTED

DEADLINE

in about 1 month

Property Management Services – Multi-Unit Residential

Residential Property Managers

POSTED

DEADLINE

in about 1 month

RFP004249 Property and Tenant Management Ontario

Solicitation # RFP004249

The Canada Mortgage and Housing Corporation is inviting qualified proponents to submit proposals under RFP-004249 for Property and Tenant Management Services across selected multi-unit rental properties in Southern Ontario. CMHC aims to establish a non-exclusive agreement with one or more successful service providers to manage day-to-day operations including tenant relations, maintenance coordination, rent collection, lease administration, and compliance with housing programs. The initial contract term will begin on December 1st, 2026, and run through November 30th, 2029, with an option for CMHC to extend the agreement by up to two additional years, bringing the total possible duration to five years under the same terms and conditions. Proponents must download all solicitation materials directly from the Canada Buys portal as no hard or electronic copies will be distributed by CMHC. Responses are due by September 1st, 2026, at 4:00 PM Eastern Time, and all submissions must adhere to the requirements outlined in the official RFP documentation. The contracting authority for this procurement is Donna D'Ovidio, who can be reached via email at ddovidio@cmhc-schl.gc.ca. The services are to be delivered across multiple locations in Southern Ontario, with performance obligations extending throughout the region. As a federal agency, CMHC is proceeding under a government-wide procurement framework, and prospective bidders are expected to demonstrate proven experience in managing multi-unit residential properties, strong operational capacities, and the ability to comply with federal housing standards. Participation is open to all eligible suppliers who meet the specified criteria, and no set-aside provisions are in effect for this solicitation.

Residential Property Managers

POSTED

DEADLINE

in about 1 month

RFP-003854-ECS and Default Real Estate Services

Solicitation # RFP-003854

Canada Mortgage and Housing Corporation is soliciting proposals under RFP-003854 for a nationwide contract to deliver legal, property management, and marketing, sales, and conveyancing services under the Enhanced Claim Service Model and Default Real Estate programs. The contract will be awarded on a non-exclusive basis for an initial three-year term, with an option to extend for up to two additional years, for a maximum potential duration of five years. Proposals must be submitted electronically by August 5, 2026, via the EBID system to EBID@cmhc-schl.gc.ca with the specified subject line, and only Word and PDF files are accepted; compressed files are prohibited. The work requires comprehensive management of CMHC’s real estate assets, including fee simple, leasehold, tenanted, and mobile homes, with contractors expected to engage subcontractors and comply with provincial and federal licensing, insurance, and regulatory requirements across all jurisdictions in Canada. Contractors must meet stringent security and data protection mandates, including holding Government of Canada Reliability or Secret security clearances for all personnel, ensuring that Protected A/B data remains within Canadian data centers, and adhering to ISO/IEC 27001 and other government cyber standards such as ITSG-33 and CSEA 3416. All proposals must include a completed Privacy Questionnaire and a Compliance Questionnaire covering legal capacity, integrity, conflict of interest, and insurance coverage. Evaluation proceeds in four stages: mandatory technical compliance checks, followed by technical ratings across data management, technology and security, and compliance, then pricing review, and finally a presentation by the top two contenders. There are no disclosed numerical weights, and award will be based on a trade-off approach prioritizing technical merit over lowest price. Invoices must be submitted electronically to accountspayable@cmhc-schl.gc.ca with PO references and supported by direct deposit information via void cheque. No physical packaging, labeling, or FOB terms apply; all requirements focus on digital security, data sovereignty, and regulatory adherence. No contract value, line items, or appropriation codes are disclosed, and the contract administration does not list named CORs, COTRs, or PCOs.

Residential Property Managers

POSTED

DEADLINE

RFP - CCH TAGETIK FUNCTIONAL SUPPORT SERVICES

Solicitation # RFx004255

Canada Mortgage and Housing Corporation is soliciting proposals for functional support services to manage and maintain its CCH Tagetik Financial Planning and Analysis solution as a managed service. The contract aims to ensure the continued performance, optimization, and alignment of the FP&A system with CMHC’s financial reporting and planning requirements. Proposals must demonstrate proven experience in supporting Tagetik or similar enterprise financial systems, with an emphasis on functional expertise, service delivery frameworks, and responsiveness to evolving business needs. The solicitation is open to qualified proponents, with no set-aside classification, and responses are due by August 10, 2026, at 2:00 PM ET. The place of performance includes both Canada and Europe, indicating flexibility in service delivery locations. Primary correspondence and inquiries should be directed to Christine Brown at the provided contact details. This procurement falls under NAICS code 518210, which covers data processing, hosting, and related services.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Process Improvement and Governance AdvisoryThe contract seeks advisory services to optimize the IT service model, strengthen governance frameworks, and enhance processes across service towers by applying industry best practices. The work will focus on improving operational efficiency and alignment within the IT service environment through structured advice and methodology-driven improvements, with deliverables expected to support long-term service reliability and scalability. The engagement is designated as a subcontract under NAICS code 541611, indicating it pertains to management consulting services specializing in administrative and other management functions. The opportunity is issued by the Canada Mortgage and Housing Corporation, part of the Government of Canada, with responses due by August 10, 2026, at 14:00 UTC. Performance is expected to occur across multiple locations, specifically in Europe and Canada, reflecting a broad geographic scope for advisory activities. There is no set-aside designation specified, and the solicitation number is not provided, but the tender can be accessed via the Canada Buys portal using the provided link. The contract underscores a strategic initiative to elevate governance and service delivery standards within federal IT operations through expert consultation.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

IT Security and Data Protection ComplianceThe contract requires strict adherence to ISO 27001 information security standards to ensure a robust and continuously maintained security management system. All Protected B data must be handled in full alignment with Canadian Security Environment (CSE) guidelines, emphasizing confidentiality, integrity, and availability. Encryption protocols must be implemented and managed across all systems and data transfers involving this sensitive information, with key management practices meeting government-grade security requirements. Data residency is strictly confined to Canada, prohibiting any storage, processing, or transmission of Protected B data outside Canadian borders, even in cloud or third-party environments. The subcontract is tied to the Canada Mortgage and Housing Corporation under the Government of Canada, with performance expected to occur in both Canada and Europe, though data handling obligations remain geographically restricted to Canada. Responses are due by August 10, 2026, and the North American Industry Classification System code indicates a focus on other scientific and technical consulting services.

POSTED

DEADLINE

Performance Monitoring and KPI ReportingThe contract titled Performance Monitoring and KPI Reporting is a subcontract issued by the Canada Mortgage and Housing Corporation under the Government of Canada, with a NAICS code of 541611 for management consulting services. It requires the contractor to monitor system performance, generate dashboards tracking SLA and KPI metrics, analyze performance trends over time, and deliver actionable reports to support continuous service improvement initiatives. The place of performance spans Europe and Canada, indicating that the work may be executed remotely or across multiple geographic locations. The solicitation was posted on July 9, 2026, with a response deadline of August 10, 2026, at 14:00 Eastern Time, allowing interested parties approximately five weeks to submit proposals. No specific set-aside provisions or point of contact details are provided, but the opportunity is accessible through the Canada Buys portal under the tender reference cb-749-87814268.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Change and Release Management ServicesThe contract titled Change and Release Management Services is a subcontract under the Government of Canada, specifically for the Canada Mortgage and Housing Corporation, aimed at managing change requests, evaluating their impacts, coordinating necessary approvals, and supporting the deployment of system updates in compliance with internal controls. The scope of work requires structured processes to ensure that all modifications to systems are thoroughly assessed for risk, aligned with operational needs, and implemented without disrupting existing services or compromising regulatory adherence. The contractor will be responsible for end-to-end change and release lifecycle management, ensuring transparency, accountability, and consistency across all system updates. The contract was posted on July 9, 2026, with a response deadline of August 10, 2026, at 14:00 UTC, and is classified under NAICS code 541512, which corresponds to computer systems design and related services. The place of performance is specified as Europe and Canada, indicating the work may be executed remotely or across these geographies, with no physical office location provided. This subcontract is open to eligible bidders without a specific set-aside designation, and interested parties must submit proposals through the Canada Buys portal using the provided tender link. The contract emphasizes operational integrity, compliance, and coordinated execution in a distributed environment.

Computer Systems Design Services

POSTED

DEADLINE