Security Incident Response & Forensics

The contract requires the development and maintenance of a comprehensive Security Incident Response Process tailored to protect sensitive unencrypted data and logs, with a strong emphasis on preserving chain-of-custody throughout all phases of incident handling. The contractor will be responsible for supporting forensic investigations to identify, analyze, and mitigate security breaches, ensuring all collected evidence is handled in a manner that maintains its integrity and legal admissibility. This includes implementing standardized procedures for detection, containment, eradication, and recovery, as well as documenting every step taken during an incident to support accountability and compliance. The work is scoped under the NAICS code 541612 for computer systems design services and is issued as a subcontract by the Government of Canada through the Department of Citizenship & Immigration. Proposals must be submitted by July 13, 2026, with the contract performance anticipated to be based in Canada. While no specific location beyond the country is provided, the nature of the work implies close coordination with federal agencies responsible for national data protection and incident response. The solicitation seeks capable entities with proven expertise in digital forensics, incident response frameworks, and secure handling of unencrypted data, ensuring alignment with Canadian government security expectations and operational requirements.