Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Third-Party Cybersecurity Risk Assessment and Monitoring

Active
International

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract titled Third-Party Cybersecurity Risk Assessment and Monitoring is issued by the Canada Mortgage and Housing Corporation under the Government of Canada and requires ongoing evaluation of cybersecurity risks associated with subcontractors and third-party vendors. The work involves validating SOC 2 and ISO compliance reports, ensuring that all third parties maintain appropriate security controls aligned with recognized standards, and continuously monitoring adherence to cybersecurity policies and frameworks. The objective is to safeguard sensitive data and systems by identifying vulnerabilities and enforcing compliance across the supply chain. The contract is classified as a subcontract with a NAICS code of 541612 and is open for responses until September 8, 2026. The place of performance is in Canada, and the solicitation was posted on July 30, 2026. While specific details on set-aside status and point of contact are not provided, bidders must be prepared to deliver regular assessments, report findings, and recommend remediation measures to maintain a robust and compliant vendor ecosystem. The scope demands technical expertise in cybersecurity frameworks, experience with third-party risk management, and the ability to communicate findings effectively to stakeholders.

General Info

Ongoing cybersecurity risk assessment and monitoring of third-party vendors to ensure SOC 2 and ISO compliance across Canada.

Agency

Government of Canada → Canada Mortgage and Housing CorporationView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

Canada, CAN

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyGovernment of Canada → Canada Mortgage and Housing Corporation
ContactsNo contacts available
OfficeN/A
Organization / Agency
Government of Canada → Canada Mortgage and Housing Corporation
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Conduct ongoing cybersecurity risk assessments of subcontractors and third-party vendors, validate SOC 2/ISO reports, and monitor compliance alignment.

Similar Contracts

Same NAICS industry code

NAICS: 541612
New
International
Assessment-Based Learning and Development Services
Solicitation # 26-017
Export Development Canada is seeking ongoing access to assessment-based learning and development services to reinforce employee onboarding, leadership growth, team cohesion, and organizational development across the agency. The services must deliver a unified, scalable framework designed to enhance self-awareness, communication, and collaboration by evaluating behavioral and communication preferences, as well as workplace dynamics. This framework is integral to EDC’s internal culture and must support both virtual and in-person delivery of training and development activities. The solution must include comprehensive access to employee assessments, personalized profile reports, facilitator resources, practitioner accreditation and renewal programs, and learning materials that enable internal teams to sustain delivery without external dependency. Administration of employee profiles must be continuous and seamless to ensure alignment with existing organizational development practices. The contract requires the successful provider to maintain the integrity and consistency of an established system already embedded in EDC’s employee experience, ensuring that all tools and resources remain current and effective. Practitioners within EDC must be equipped to deliver these services independently using a standardized methodology, with ongoing support for accreditation, material updates, and technical assistance. The solicitation, numbered 26-017, is open for response until August 14, 2026, and is procured through the Government of Canada through Export Development Canada’s contracting authority, with all inquiries directed to Camila Suarez at Solicitations@edc.ca. The work is to be performed in Ottawa, and the agency emphasizes continuity, scalability, and internal capability-building as non-negotiable requirements for any proposed solution.
Export Development Canada

POSTED

1 day ago

DEADLINE

in 14 days
View Details
NAICS: 541612
New
DIBBS
Cybersecurity Compliance & Incident ReportingThis contract mandates the implementation and ongoing maintenance of cybersecurity practices aligned with NIST SP 800-171 and DFARS 252.204-7012 to ensure the protection of controlled unclassified information within the defense industrial base. The work includes establishing, documenting, and sustaining security controls to meet federal requirements, with a strong emphasis on continuous compliance and readiness for audits. A critical component is the accurate and timely reporting of cyber incidents through the Defense Industrial Base Cyber Incident Reporting portal, DIBNet, ensuring the Department of Defense receives prompt notifications of potential threats or breaches involving covered contractor information systems. The subcontract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541612 for management, scientific, and technical consulting services. Work is performed in accordance with federal cybersecurity standards without specified geographic restrictions, indicating potential remote or multi-site execution. The agreement is structured as a subcontract, likely supporting a prime contractor’s obligations, and requires sustained operational diligence to maintain compliance, respond to incidents, and adapt to evolving regulatory guidance without explicit set-aside provisions or local performance constraints outlined.
Defense Logistics Agency

POSTED

2 days ago

DEADLINE

N/A
View Details
NAICS: 541612
New
Federal
Cybersecurity Compliance & IL5 Maintenance ServicesThe contract requires ongoing support to maintain the DIPS platform’s compliance with Department of Defense Information Technology Security Certification and Accreditation Process (DIACAP) Impact Level 5 (IL5) security requirements. This includes implementing and managing a robust vulnerability management program to identify, prioritize, and remediate security weaknesses, ensuring the platform remains resilient against emerging threats. Comprehensive audit logging must be maintained to provide verifiable, tamper-resistant records of system activity, access attempts, and configuration changes, enabling continuous monitoring and forensic analysis. The provider is also responsible for executing a full incident response capability, including detection, analysis, containment, eradication, and recovery from security breaches, with timely reporting to align with DoD directives. All work must be performed in accordance with DoD standards and must support the platform’s operational continuity and security posture under IL5, which is reserved for systems handling the most sensitive, mission-critical data. The subcontract is tied to the Telecommunications Division under the Department of Defense and is classified under NAICS code 541612 for Computer Systems Design Services. While the specific location of performance is not detailed, the work is critical to the defense infrastructure and requires adherence to strict compliance protocols, with no set-aside provisions specified. The contract was posted in July 2026 and is accessible via the SAM.gov portal for further reference.
Telecommunications Division- HC1013

POSTED

2 days ago

DEADLINE

N/A
View Details
NAICS: 541612
New
SLED
Electronic Permitting and Administrative Filing ServicesThe contract involves providing administrative support for the electronic submission, tracking, and maintenance of permit applications through Kern County’s Accela system, focusing on streamlining permitting processes in Bakersfield, California, with a ZIP code of 93308. This subcontract is classified under NAICS code 541612, indicating it relates to administrative management and general management consulting services, specifically tailored to support government permitting workflows. The work requires expertise in navigating and managing digital platforms to ensure accurate and timely processing of permits, with responsibilities likely including data entry, application review, compliance monitoring, and coordination with county staff and applicants. Performance of the services is centered in Bakersfield and is part of Kern County’s broader efforts to modernize its permitting infrastructure via electronic systems. The contract was posted on July 29, 2026, and while no solicitation number or set-aside details are provided, it is clearly structured as a subcontract within the county’s administrative framework. The contractor must ensure seamless integration with the Accela platform, maintain strict records, and adhere to local government standards for document handling and deadline compliance, contributing to more efficient and transparent public services.
Kern County

POSTED

2 days ago

DEADLINE

N/A
View Details

More opportunities from Government of Canada → Canada Mortgage and Housing Corporation

Same awarding agency

NAICS: 561612
New
International
Physical Security Controls Documentation and AssessmentThe contract pertains to the documentation and assessment of physical access controls at facilities that handle sensitive data belonging to the Canada Mortgage and Housing Corporation. This includes a thorough review of access logs, video surveillance systems, secure storage protocols, and environmental controls to ensure compliance with security standards. The scope requires evaluating how effectively these measures prevent unauthorized entry, protect data integrity, and maintain operational security across all relevant sites within Canada. The assessment must provide actionable insights into existing gaps and recommend enhancements to strengthen physical security posture. Subcontractors are expected to respond by the deadline of September 8, 2026, with work primarily performed across locations in Canada where CMHC/SCHL data is stored or processed. The contract falls under NAICS code 561612, indicating it relates to security services and investigation. It is issued by the Government of Canada through the Canada Mortgage and Housing Corporation and is classified as a subcontract. No bid set-aside specifications are provided, and participation is open to qualified vendors capable of delivering comprehensive physical security evaluations without reliance on external documentation. All work must align with Canadian federal data protection and infrastructure security requirements.
Security Guards and Patrol Services

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
NAICS: 541611
New
International
Cybersecurity Compliance Audit Preparation (SOC 2 / ISO 27001)The contract requires the preparation and ongoing maintenance of cybersecurity compliance certification packages for both the prime contractor and all associated subcontractors, specifically targeting SOC 2 Type II and ISO/IEC 27001 standards. This involves conducting comprehensive readiness assessments, developing and documenting necessary controls, coordinating internal and external testing procedures, and producing detailed audit reports to demonstrate adherence to required security frameworks. The work must ensure that all parties meet rigorous industry benchmarks for data protection, operational security, and continuous compliance, with a focus on sustained certification rather than a one-time audit. The effort is to be performed in support of the Canada Mortgage and Housing Corporation, a Government of Canada agency, under a subcontracting arrangement classified under NAICS code 541611. There is no set-aside designation specified, and performance is expected to take place across Canada. Proposals must be submitted by September 8, 2026, following the posting of the solicitation on July 30, 2026, through the Canada Buys procurement portal. Successful bidders will be responsible for delivering end-to-end compliance support, including managing timelines, coordinating with multiple stakeholders, and ensuring audit readiness at all levels of the contracting hierarchy.
Administrative Management and General Management Consulting Services

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
NAICS: 531311
New
International
RFP004269 Property and Tenant Management Quebec
Solicitation # RFP004269
Canada Mortgage and Housing Corporation is issuing RFP-004269 to procure Property and Tenant Management Services for a selection of default co-operative housing properties located in Quebec. The goal is to establish a non-exclusive agreement with one or more qualified service providers who can deliver comprehensive management services, including property maintenance, tenant relations, financial oversight, and regulatory compliance, to ensure the continued operation and stability of these housing units. The contract will run for a maximum of three years, commencing on December 1, 2026, and concluding on November 30, 2029, with the possibility of extensions or modifications based on performance and operational needs. Proponents must submit their proposals by the deadline of September 8, 2026, at 4:00 p.m. Eastern Time, and are required to download all solicitation materials directly from the CanadaBuys portal, as no physical or emailed documents will be provided. The contract is open to federal suppliers and is not subject to any set-aside provisions. Donna D'Ovidio, Contracting Authority at CMHC, serves as the primary point of contact for inquiries. All work under this agreement will be performed across various locations within Quebec, and successful bidders will be expected to demonstrate capacity to manage multiple properties under differing conditions while adhering to CMHC’s standards and reporting requirements.
Residential Property Managers

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
NAICS: 518210
New
International
IT Systems & Reporting Platform SupportThe contract seeks a subcontractor to provide and maintain secure IT systems dedicated to property management, reporting, and performance tracking for the Canada Mortgage and Housing Corporation. The systems must ensure Canadian data residency, comply with federal audit readiness requirements, and seamlessly integrate with CMHC’s existing reporting frameworks. Security, data sovereignty, and regulatory alignment are critical, as all operations and data storage must be physically located within Canada to meet government compliance standards. The platform must support accurate, timely, and auditable reporting to fulfill CMHC’s obligations under federal programs. The contract is classified as a subcontract under NAICS code 518210, with a posted date of July 28, 2026, and a response deadline of September 1, 2026. Performance is expected to occur across Canada, with no specified physical office location required, but all data and system operations must remain within Canadian borders. The contracting authority is the Government of Canada through CMHC, indicating the need for adherence to public sector procurement protocols and data governance policies. Proposals must demonstrate technical capability, proven experience in secure government-grade systems, and familiarity with CMHC’s reporting infrastructure to ensure operational compatibility and ongoing compliance.
Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

4 days ago

DEADLINE

in about 1 month
View Details
NAICS: 541611
New
International
Accessibility & Official Languages Compliance ServicesThe contract titled Accessibility & Official Languages Compliance Services is issued by the Canada Mortgage and Housing Corporation under the Government of Canada and requires the successful bidder to ensure all services and communications adhere to federal accessibility standards, including compliance with the Web Content Accessibility Guidelines (WCAG). This involves delivering all materials and digital content in both official languages, English and French, with consistent quality and accuracy across platforms. A key deliverable is the preparation of Accessibility Conformance Reports that document adherence to accessibility requirements and provide transparent evidence of compliance. The contract is structured as a subcontract and is open for responses until September 1, 2026. It falls under NAICS code 541611, which pertains to management consulting services, reflecting the need for strategic guidance and implementation support in accessibility and language compliance. The place of performance covers the entirety of Canada, with no specific physical location mandated, allowing for remote or national delivery. The solicitation was posted on July 28, 2026, and interested parties must submit their proposals prior to the deadline to meet the Government of Canada’s obligations under the Accessible Canada Act and official languages legislation.
Administrative Management and General Management Consulting Services

POSTED

4 days ago

DEADLINE

in about 1 month
View Details
NAICS: 541611
New
International
Business Continuity & Disaster Recovery (BC/DR) PlanningThe contract titled Business Continuity & Disaster Recovery (BC/DR) Planning requires the development, documentation, and attestation of a comprehensive plan to ensure operational resilience through risk assessment, defined recovery objectives, and annual testing protocols. The scope encompasses creating detailed business continuity and disaster recovery strategies that align with organizational needs and regulatory expectations, with a focus on identifying potential disruptions, establishing recovery time and point objectives, and validating plan effectiveness through regular, structured testing cycles. The deliverables must provide verifiable attestation that the plan is robust, current, and capable of maintaining critical services during and after disruptive events. This subcontract is issued by the Canada Mortgage and Housing Corporation under the Government of Canada, with a NAICS code of 541611 indicating management consulting services. The solicitation was posted on July 28, 2026, and responses are due by September 1, 2026. Place of performance is designated as Canada, though no specific city is named. The contract is open to eligible subcontractors seeking to support federal continuity and resilience initiatives, with no set-aside classification specified. Interested parties must submit proposals by the deadline to be considered for award, and all work must comply with Canadian government standards for service continuity and risk mitigation.
Administrative Management and General Management Consulting Services

POSTED

4 days ago

DEADLINE

in about 1 month
View Details
NAICS: 531311
New
International
RFP004249 Property and Tenant Management Ontario
Solicitation # DDP-004249
The Canada Mortgage and Housing Corporation is inviting qualified proponents to submit proposals under RFP-004249 for Property and Tenant Management Services across selected multi-unit rental properties in Southern Ontario. CMHC aims to establish a non-exclusive agreement with one or more successful service providers to manage day-to-day operations including tenant relations, maintenance coordination, rent collection, lease administration, and compliance with housing programs. The initial contract term will begin on December 1st, 2026, and run through November 30th, 2029, with an option for CMHC to extend the agreement by up to two additional years, bringing the total possible duration to five years under the same terms and conditions. Proponents must download all solicitation materials directly from the Canada Buys portal as no hard or electronic copies will be distributed by CMHC. Responses are due by September 1st, 2026, at 4:00 PM Eastern Time, and all submissions must adhere to the requirements outlined in the official RFP documentation. The contracting authority for this procurement is Donna D'Ovidio, who can be reached via email at ddovidio@cmhc-schl.gc.ca. The services are to be delivered across multiple locations in Southern Ontario, with performance obligations extending throughout the region. As a federal agency, CMHC is proceeding under a government-wide procurement framework, and prospective bidders are expected to demonstrate proven experience in managing multi-unit residential properties, strong operational capacities, and the ability to comply with federal housing standards. Participation is open to all eligible suppliers who meet the specified criteria, and no set-aside provisions are in effect for this solicitation.
Residential Property Managers

POSTED

4 days ago

DEADLINE

in about 1 month
View Details