IT Audit and Cybersecurity Assessment

The contract seeks qualified vendors to evaluate IT systems, data security controls, and adherence to cybersecurity frameworks across government departments under the Office of the Auditor General of Canada. The scope includes conducting comprehensive audits to assess the effectiveness of existing cybersecurity measures, identifying vulnerabilities, and ensuring alignment with national and international standards. The work will focus on governmental agencies operating within Canada and requires expertise in federal IT infrastructure, risk assessment methodologies, and compliance frameworks relevant to public sector security requirements. This is a subcontract opportunity, classified under NAICS code 541512 for computer systems design and related services, with no set-aside provisions specified. The posting date is May 27, 2026, and the response deadline is set to January 1, 2100, indicating an open-ended or indefinite solicitation window. All performance activities are expected to take place within Canada, and while no point of contact is listed, the tender details can be accessed via the Canada Buys portal. Contractors must demonstrate proven experience in government cybersecurity assessments and be prepared to deliver thorough, actionable findings that support institutional accountability and risk mitigation.