Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, September 2 at 2:00 PM EDT

Register Free →

RFP FOR FIRST LINE OF DEFENCE SECURITY SOLUTION

Active
RFx004510International

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Canada Mortgage and Housing Corporation is seeking proposals for a Cyber Security Governance, Risk, and Compliance solution to enhance operational efficiency, regulatory alignment, and cyber risk visibility across its IT and cyber domains. This federal solicitation, identified as RFx004510, is open for responses until September 28, 2026. The successful proponent will enter into a non-exclusive agreement for an initial term of five years, with the possibility of two optional renewal years, totaling a potential seven-year contract. The performance of the services will be centered in the National Capital Region of Canada.

General Info

CMHC seeks a cyber security GRC solution for five to seven years.

Agency

Government of Canada → Canada Mortgage and Housing CorporationView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Canada, National Capital Region (NCR), CAN

Set-Aside

NONE

Documents

(4)

RFx004510 ADDENDA No. 1 DDP SOLUTION DE SÉCURITÉ DE PREMIÈRE LIGNE DE MAÎTRISE.pdf

PDF

RFx004510 Amendment No. 1 to RFP First Line of Defense Solution.pdf

PDF

RFx004510 (DDP) SOLUTION DE SÉCURITÉ DE PREMIÈRE LIGNE DE MAÎTRISE 21 aout 26.pdf

PDF

RFx0004510 CMHC RFP - First Line of Defense Security Solution Aug. 21, 2026.pdf

PDF

AI Contract Breakdown

Uniform Contract Format

What is UCF?

Uniform Contract Format (UCF) uses AI to break down any contract into standardized sections—scope, pricing, deliverables, and evaluation criteria.

Timeline

PhaseSolicitation
Posted

Solicitation

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyGovernment of Canada → Canada Mortgage and Housing Corporation
Contacts1 person available
OfficeN/A
Organization / Agency
Government of Canada → Canada Mortgage and Housing Corporation
View Agency Profile
Office AddressN/A
Contacts
Christine BrownContracting Authority

Full Description

Show more
OBJECTIVE OF THIS RFP With this RFP, Canada Mortgage and Housing Corporation (CMHC) is seeking proposals from qualified “Proponent(s)” for the provision of a Cyber Security Governance, Risk, and Compliance (GRC) solution, collectively the “Solution". The Solution will support operational efficiency, regulatory alignment, and cyber risk visibility across IT and Cyber domains. It is CMHC’s intention to enter into an agreement on a non-exclusive basis with the successful Proponent for a period of five years with two optional renewal years for a total of seven years.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
Federal
CIO Microsoft Sentinel Implementation FY26
Solicitation # W91QF026QA015
This sources sought notice, identified as W91QF026QA015 and titled CIO Microsoft Sentinel Implementation FY26, is issued by the Department of Defense’s W6QM Micc-Carlisle Barracks to gather market interest for the procurement of highly specialized commercial professional services aimed at designing, implementing, and operationalizing the Microsoft Sentinel platform for the Army University. The requirement centers on establishing a fully functional Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) system integrated with Microsoft 365 A5 licensing, requiring expert-level knowledge of the DoD’s security and compliance environment. The contractor must successfully onboard approximately 350 endpoints and all mandated M365 data sources with a minimum 98% ingestion success rate while ensuring full compliance with NIST SP 800-53 security controls and OMB M-21-31 Event Logging Tier 2 maturity standards. All work must be delivered remotely, with no physical delivery or on-site presence required, and the contractor must provide comprehensive as-built documentation and formal training to ensure government self-sufficiency. The vendor must be a registered Microsoft Solution Partner and Tier-1 Cloud Solution Provider, actively registered in SAM.gov, and demonstrate proven experience with DoD, federal compliance frameworks, and Microsoft Sentinel in enterprise cloud or hybrid environments. The offeror must submit a statement of interest and supporting documentation by the July 8, 2026 deadline to demonstrate technical capability and compliance with stringent personnel qualifications. Proposed key personnel must meet mandatory experience thresholds including three years of IT or cybersecurity project management leadership, two years of hands-on Microsoft Sentinel architecture and tuning, and direct experience implementing OMB M-21-31 event logging. Each individual must hold at least one active certification—SC-100, SC-200, or CISSP—and maintain DoD 8570.01-M baseline certifications throughout performance. All personnel require signed NDAs submitted at least 10 days before work begins and must complete annual DoD Cyber Awareness Challenge and OPSEC Level I training. The Government will conduct full documentation review, including 100% inspection of deliverables, design artifacts, and personnel credentials using a Quality Assurance Surveillance Plan. Evaluation will follow Low Price Technically Acceptable procedures under FAR 15.101-2, where only technically acceptable offers will be considered, with award going to the lowest-priced submitter
W6QM Micc-Carlisle Barracks

POSTED

about 23 hours ago

DEADLINE

in 10 days
View Details

More opportunities from Government of Canada → Canada Mortgage and Housing Corporation

Same awarding agency

NAICS: 531311
International
RFP004269 Property and Tenant Management Quebec
Solicitation # RFP004269
Canada Mortgage and Housing Corporation is issuing RFP-004269 to procure Property and Tenant Management Services for a selection of default co-operative housing properties located in Quebec. The goal is to establish a non-exclusive agreement with one or more qualified service providers who can deliver comprehensive management services, including property maintenance, tenant relations, financial oversight, and regulatory compliance, to ensure the continued operation and stability of these housing units. The contract will run for a maximum of three years, commencing on December 1, 2026, and concluding on November 30, 2029, with the possibility of extensions or modifications based on performance and operational needs. Proponents must submit their proposals by the deadline of September 8, 2026, at 4:00 p.m. Eastern Time, and are required to download all solicitation materials directly from the CanadaBuys portal, as no physical or emailed documents will be provided. The contract is open to federal suppliers and is not subject to any set-aside provisions. Donna D'Ovidio, Contracting Authority at CMHC, serves as the primary point of contact for inquiries. All work under this agreement will be performed across various locations within Quebec, and successful bidders will be expected to demonstrate capacity to manage multiple properties under differing conditions while adhering to CMHC’s standards and reporting requirements.
Residential Property Managers

POSTED

15 days ago

DEADLINE

in 10 days
View Details
NAICS: 531311
International
RFP004249 Property and Tenant Management Ontario
Solicitation # DDP-004249
The Canada Mortgage and Housing Corporation is inviting qualified proponents to submit proposals under RFP-004249 for Property and Tenant Management Services across selected multi-unit rental properties in Southern Ontario. CMHC aims to establish a non-exclusive agreement with one or more successful service providers to manage day-to-day operations including tenant relations, maintenance coordination, rent collection, lease administration, and compliance with housing programs. The initial contract term will begin on December 1st, 2026, and run through November 30th, 2029, with an option for CMHC to extend the agreement by up to two additional years, bringing the total possible duration to five years under the same terms and conditions. Proponents must download all solicitation materials directly from the Canada Buys portal as no hard or electronic copies will be distributed by CMHC. Responses are due by September 1st, 2026, at 4:00 PM Eastern Time, and all submissions must adhere to the requirements outlined in the official RFP documentation. The contracting authority for this procurement is Donna D'Ovidio, who can be reached via email at ddovidio@cmhc-schl.gc.ca. The services are to be delivered across multiple locations in Southern Ontario, with performance obligations extending throughout the region. As a federal agency, CMHC is proceeding under a government-wide procurement framework, and prospective bidders are expected to demonstrate proven experience in managing multi-unit residential properties, strong operational capacities, and the ability to comply with federal housing standards. Participation is open to all eligible suppliers who meet the specified criteria, and no set-aside provisions are in effect for this solicitation.
Residential Property Managers

POSTED

15 days ago

DEADLINE

in 3 days
View Details
NAICS: 561612
International
Physical Security Controls Documentation and AssessmentThe contract pertains to the documentation and assessment of physical access controls at facilities that handle sensitive data belonging to the Canada Mortgage and Housing Corporation. This includes a thorough review of access logs, video surveillance systems, secure storage protocols, and environmental controls to ensure compliance with security standards. The scope requires evaluating how effectively these measures prevent unauthorized entry, protect data integrity, and maintain operational security across all relevant sites within Canada. The assessment must provide actionable insights into existing gaps and recommend enhancements to strengthen physical security posture. Subcontractors are expected to respond by the deadline of September 8, 2026, with work primarily performed across locations in Canada where CMHC/SCHL data is stored or processed. The contract falls under NAICS code 561612, indicating it relates to security services and investigation. It is issued by the Government of Canada through the Canada Mortgage and Housing Corporation and is classified as a subcontract. No bid set-aside specifications are provided, and participation is open to qualified vendors capable of delivering comprehensive physical security evaluations without reliance on external documentation. All work must align with Canadian federal data protection and infrastructure security requirements.
Security Guards and Patrol Services

POSTED

about 1 month ago

DEADLINE

in 10 days
View Details
NAICS: 541611
International
Cybersecurity Compliance Audit Preparation (SOC 2 / ISO 27001)The contract requires the preparation and ongoing maintenance of cybersecurity compliance certification packages for both the prime contractor and all associated subcontractors, specifically targeting SOC 2 Type II and ISO/IEC 27001 standards. This involves conducting comprehensive readiness assessments, developing and documenting necessary controls, coordinating internal and external testing procedures, and producing detailed audit reports to demonstrate adherence to required security frameworks. The work must ensure that all parties meet rigorous industry benchmarks for data protection, operational security, and continuous compliance, with a focus on sustained certification rather than a one-time audit. The effort is to be performed in support of the Canada Mortgage and Housing Corporation, a Government of Canada agency, under a subcontracting arrangement classified under NAICS code 541611. There is no set-aside designation specified, and performance is expected to take place across Canada. Proposals must be submitted by September 8, 2026, following the posting of the solicitation on July 30, 2026, through the Canada Buys procurement portal. Successful bidders will be responsible for delivering end-to-end compliance support, including managing timelines, coordinating with multiple stakeholders, and ensuring audit readiness at all levels of the contracting hierarchy.
Administrative Management and General Management Consulting Services

POSTED

about 1 month ago

DEADLINE

in 10 days
View Details
NAICS: 518210
International
IT Systems & Reporting Platform SupportThe contract seeks a subcontractor to provide and maintain secure IT systems dedicated to property management, reporting, and performance tracking for the Canada Mortgage and Housing Corporation. The systems must ensure Canadian data residency, comply with federal audit readiness requirements, and seamlessly integrate with CMHC’s existing reporting frameworks. Security, data sovereignty, and regulatory alignment are critical, as all operations and data storage must be physically located within Canada to meet government compliance standards. The platform must support accurate, timely, and auditable reporting to fulfill CMHC’s obligations under federal programs. The contract is classified as a subcontract under NAICS code 518210, with a posted date of July 28, 2026, and a response deadline of September 1, 2026. Performance is expected to occur across Canada, with no specified physical office location required, but all data and system operations must remain within Canadian borders. The contracting authority is the Government of Canada through CMHC, indicating the need for adherence to public sector procurement protocols and data governance policies. Proposals must demonstrate technical capability, proven experience in secure government-grade systems, and familiarity with CMHC’s reporting infrastructure to ensure operational compatibility and ongoing compliance.
Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 1 month ago

DEADLINE

in 3 days
View Details
NAICS: 541611
International
Accessibility & Official Languages Compliance ServicesThe contract titled Accessibility & Official Languages Compliance Services is issued by the Canada Mortgage and Housing Corporation under the Government of Canada and requires the successful bidder to ensure all services and communications adhere to federal accessibility standards, including compliance with the Web Content Accessibility Guidelines (WCAG). This involves delivering all materials and digital content in both official languages, English and French, with consistent quality and accuracy across platforms. A key deliverable is the preparation of Accessibility Conformance Reports that document adherence to accessibility requirements and provide transparent evidence of compliance. The contract is structured as a subcontract and is open for responses until September 1, 2026. It falls under NAICS code 541611, which pertains to management consulting services, reflecting the need for strategic guidance and implementation support in accessibility and language compliance. The place of performance covers the entirety of Canada, with no specific physical location mandated, allowing for remote or national delivery. The solicitation was posted on July 28, 2026, and interested parties must submit their proposals prior to the deadline to meet the Government of Canada’s obligations under the Accessible Canada Act and official languages legislation.
Administrative Management and General Management Consulting Services

POSTED

about 1 month ago

DEADLINE

in 3 days
View Details
NAICS: 541611
International
Business Continuity & Disaster Recovery (BC/DR) PlanningThe contract titled Business Continuity & Disaster Recovery (BC/DR) Planning requires the development, documentation, and attestation of a comprehensive plan to ensure operational resilience through risk assessment, defined recovery objectives, and annual testing protocols. The scope encompasses creating detailed business continuity and disaster recovery strategies that align with organizational needs and regulatory expectations, with a focus on identifying potential disruptions, establishing recovery time and point objectives, and validating plan effectiveness through regular, structured testing cycles. The deliverables must provide verifiable attestation that the plan is robust, current, and capable of maintaining critical services during and after disruptive events. This subcontract is issued by the Canada Mortgage and Housing Corporation under the Government of Canada, with a NAICS code of 541611 indicating management consulting services. The solicitation was posted on July 28, 2026, and responses are due by September 1, 2026. Place of performance is designated as Canada, though no specific city is named. The contract is open to eligible subcontractors seeking to support federal continuity and resilience initiatives, with no set-aside classification specified. Interested parties must submit proposals by the deadline to be considered for award, and all work must comply with Canadian government standards for service continuity and risk mitigation.
Administrative Management and General Management Consulting Services

POSTED

about 1 month ago

DEADLINE

in 3 days
View Details