Managed Services Provider (MSP)

Public Health Ontario (PHO) is seeking a single lead service provider to establish a strategic partnership for the delivery, coordination, and continuous improvement of managed information technology and cyber security services. This initiative, identified by project reference 183327001 and solicitation number rfx_20450, requires an integrated Managed Service Provider (MSP) and Managed Security Service Provider (MSSP) capability. The partnership will utilize a hybrid operating model that blends outsourced services with PHO-retained capabilities to enhance operational resilience, advance cyber maturity, and support digital priorities through 24/7/365 monitoring, automation, and scalable technical capacity. The selected provider must demonstrate mandatory capabilities in Microsoft 365 E5+, Digital Workplace, IT Service Desk, and Microsoft Azure Cloud management, as well as MSSP functions including Managed SIEM, XDR, Threat Intelligence, Vulnerability Management, and Incident Response. A critical requirement is the operationalization of agentic AI within SOC operations and a commitment to participate in the Ontario Provincial Cyber Security Operating Model (CSOM). To ensure strict data privacy, all personal health and personal information must be stored, processed, and accessed exclusively within Canada in compliance with PHIPA, PIPEDA, and GO-ITS standards. The procurement process follows a Best Score awarding strategy, with evaluations split between a Qualification Envelope, a Technical Envelope for non-price criteria, and a Commercial Envelope for pricing. Proponents must adhere to strict submission guidelines via the Ontario Tenders Portal, ensuring no pricing information is included in technical responses. Additionally, the provider must comply with comprehensive health and safety standards as mandated by the Occupational Health and Safety Act (OHSA) and the Accessibility for Ontarians with Disabilities Act.