IT Security Professional Services Under the Task-Based Services Supply Arrangement

Scope Summary

Public Safety Canada requires task-based IT professional services to complete defined security assessment, authorization, architecture, testing, remediation-validation and incident-readiness packages for identified departmental systems, applications, cloud services, networks and technology initiatives. The Contractor will manage its personnel and methods of work and will remain responsible for producing complete and accepted deliverables. PS will identify systems, owners, security requirements and decision authorities; provide authorized access and available evidence; make risk decisions; and accept or reject deliverables. Contractor personnel will not be directed as employees of Canada. The Contractor must be capable of mobilizing and managing sufficient qualified resources to perform multiple concurrent Task Authorizations, where authorized by PS, without compromising agreed schedules, deliverable quality, required independence or security requirements. Only selected TBIPS SA Holders currently holding a TBIPS SA for Tier 1 in the National Capital Region under the EN578-170432 series of SAs are invited to compete. SA Holders may not submit a bid in response to this bid solicitatio

Bid Readiness Checklist

• 0. Eligibility Restriction Gate Mandatory
  Restricted: SA holders only — Confirm your company already holds active qualification under this supply arrangement, standing offer, framework, or set-aside before preparing a bid.
  Suggested Evidence: Pre-Qualification Letter / SA Number / Set-Aside Certification
• 1. Portal Registration & Eligibility Mandatory
  Confirm active supplier account on the issuing portal to submit bids to buyer "Department of Public Safety and Emergency Preparedness (PS)" (Canada).
  Suggested Evidence: SAP Ariba Supplier ID / Procurement Business Number (PBN)
• 2. Submission Deadline & Format Mandatory
  Finalize pricing and compliance attachments at least 24 hours ahead of Closes 2026-12-07.
  Suggested Evidence: Signed Cover Form, Mandatory Returnables & Complete File Upload
• 3. Technical Architecture & Security Mandatory
  Document system architecture, data residency/privacy controls, implementation milestones, and post-launch SLA support.
  Suggested Evidence: Architecture Overview, Security Controls & SLA Matrix
• 4. Commercial Pricing Schedule Mandatory
  Structure transparent itemized fixed or T&M rate pricing aligned with notice deliverables (ceiling not disclosed in notice).
  Suggested Evidence: Itemized Pricing Table, Rate Card & Scope Assumptions