IT Security Professional Services Under the Task-Based Services Supply Arrangement

Public Safety Canada is soliciting task-based IT professional services under the Task-Based Informatics Professional Services Supply Arrangement to support security assessments, authorizations, architecture, testing, remediation validation, and incident readiness for departmental systems, cloud services, and networks. The scope includes delivering up to 30 Authorization to Operate packages, producing security architectures and design reviews, and performing vulnerability assessments and penetration testing. The contract is awarded based on a combined rating of 70 percent technical merit and 30 percent price, with a focus on the depth of experience in security controls and the breadth of accepted deliverables. The contract follows an as-and-when-requested structure using Task Authorizations to define specific scopes, schedules, and deliverables. The initial term runs from the date of award to March 31, 2027, with two irrevocable one-year extension options. Services are priced as all-inclusive per diem rates based on TBIPS categories, including IT Security TRA and C&A Analysts, Design Specialists, Network Security Analysts, and Incident Management Specialists. The contractor must maintain a valid organization security clearance, adhere to a strict non-disclosure agreement, and provide resources with industry-recognized certifications such as CISSP, CISM, or OSCP. Performance is measured against baseline criteria for completeness, accuracy, traceability, and timeliness, with Public Safety Canada serving as the final authority for the acceptance or rejection of deliverables.