Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Government Contract opportunity from Government of Canada was posted on July 8, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Third-Party Compliance and Certification Audit

Closed
International

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541611
New
Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services (RFP-VC-26-006), Inland Empire Utilities Agency (California)
Solicitation # RFP-VC-26-006
Hagerty Consulting, Inc. is seeking a Disadvantaged Business Enterprise (DBE) subcontractor to support an engagement with the Inland Empire Utilities Agency (IEUA) in California. The project focuses on enhancing organizational resilience through the development and review of a Business Impact Analysis (BIA), Disaster Recovery Plan (DRP), and Business Continuity Plan (BCP), as well as the creation of recovery playbooks. The scope of work includes participating in client workshops, conducting assessments, and facilitating in-person tabletop exercises to identify response gaps. Preference is given to firms with expertise in IT/OT resilience and experience within the water, wastewater, or critical infrastructure sectors. The overall project is funded by the Environmental Protection Agency (EPA) and is estimated at approximately 1 million dollars per year, with an initial contract term of three years and an option to extend. Award selection is based on the offeror's past performance in the utility sector, personnel qualifications, and proposed methodology. The contract is subject to California Labor Code prevailing wage requirements and requires adherence to CISA and NIST standards, specifically the NIST Risk Assessment Framework. All final deliverables must be submitted electronically in both PDF and Word formats, and the successful consultant must maintain active registration in SAM.gov.
Hagerty Consulting, Inc.

POSTED

about 6 hours ago

DEADLINE

in 16 days

AI Contract Overview

Show more

Shared Services Canada is seeking a third-party vendor to conduct an independent audit and validation of a software solution to ensure compliance with SOC 2, ISO 27001, and GDPR standards. The work involves a detailed assessment of controls, processes, and documentation to verify adherence to these international and industry-specific frameworks, with the possibility of subcontracting to certified specialists to guarantee credible certification outcomes. The contract is structured as a subcontract under NAICS code 541611, focused on administrative management and general management consulting services, and is open to qualified providers aiming to support the Government of Canada’s cybersecurity and data privacy objectives. The opportunity was posted on July 8, 2026, with responses due by July 21, 2026, at 2:00 PM Eastern Time, and the place of performance is tied to the National Capital Region, though remote work may be permitted as long as deliverables meet federal requirements.

General Info

Third-party audit for SOC 2, ISO 27001, and GDPR compliance under Government of Canada contract.

Documents

This scope was carved out of BPM026071.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Peer GFS or Equivalent for DND

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed
Posted

subcontract

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyGovernment of Canada → Shared Services Canada
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Independent audit and validation of the software solution’s compliance with SOC 2, ISO 27001, and GDPR standards, potentially subcontracted for certification assurance.

More opportunities from Government of Canada → Shared Services Canada

Same awarding agency

NAICS: 517111
International
Local Internet Access Services (LIAS)
Solicitation # BPM014160
Shared Services Canada (SSC) has issued Request for Supply Arrangement (RFSA) BPM014160 to prequalify Internet Service Providers (ISPs) to provide Local Internet Access Services (LIAS) for federal government sites across Canada. This initiative aims to establish a pool of qualified suppliers to streamline the procurement of symmetrical and asymmetrical internet connections, formalize legacy connections, and standardize the contract award process for SSC, its partner organizations, and mandatory clients. The RFSA is not a direct solicitation for bids but a qualification process; once an ISP is issued a Supply Arrangement, they become eligible to compete for specific requirements through future Requests for Quotation (RFQ) or Requests for Proposal (RFP). The procurement is managed through the SSC Procure to Pay (P2P) Portal, where all submissions must be uploaded. Qualified suppliers will be evaluated based on their capacity and experience, with specific technical requirements such as bandwidth and Service Level Agreements defined at the individual Service Order level. Pricing is not fixed but is determined on a per-requirement basis based on geographic location and technical needs, though Canada may directly select compliant contractors for requirements totaling 40,000 dollars or less. The contract incorporates General Conditions for Higher Complexity Services and requires bidders to meet specific security clearance standards, including Reliability Status for personnel accessing sensitive sites.
Wired Telecommunications Carriers

POSTED

6 months ago

DEADLINE

in over 38 years
View Details

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS