IT Security and Data Protection Compliance

The contract requires strict adherence to ISO 27001 information security standards to ensure a robust and continuously maintained security management system. All Protected B data must be handled in full alignment with Canadian Security Environment (CSE) guidelines, emphasizing confidentiality, integrity, and availability. Encryption protocols must be implemented and managed across all systems and data transfers involving this sensitive information, with key management practices meeting government-grade security requirements. Data residency is strictly confined to Canada, prohibiting any storage, processing, or transmission of Protected B data outside Canadian borders, even in cloud or third-party environments. The subcontract is tied to the Canada Mortgage and Housing Corporation under the Government of Canada, with performance expected to occur in both Canada and Europe, though data handling obligations remain geographically restricted to Canada. Responses are due by August 10, 2026, and the North American Industry Classification System code indicates a focus on other scientific and technical consulting services.