Opportunity

CanadaBuys #ITQ-004121-1

CMHC Prequalification for Co-Managed SOC and SIEM Services (Microsoft Azure Focus)

Posted

April 01, 2026

Respond By

April 29, 2026

Identifier

ITQ-004121-1

NAICS

541512, 541513

Canada Mortgage and Housing Corporation (CMHC) is seeking to prequalify suppliers for a future RFP to deliver a co-managed Security Operations Centre (SOC) and Security Information and Event Management (SIEM) solution for its national operations. - Government Buyer: - Canada Mortgage and Housing Corporation (CMHC), the Government of Canada's National Housing Agency - Offices and service locations across Ottawa, Calgary, Toronto, Montreal, Halifax, and Vancouver - Products/Services Requested: - Co-managed SOC and SIEM services, including: - 24/7/365 security monitoring and incident response - SIEM management (notably Microsoft Sentinel) - Security tooling lifecycle management (EDR, NDR, SOAR) - Vulnerability management, threat intelligence, and threat hunting - Endpoint and network security monitoring (e.g., Defender for Endpoint) - Data loss prevention (DLP) and data security operations - Integration with Microsoft Azure, M365 Defender, and cloud-native services - Security orchestration, automation, and response (SOAR) - Advanced analytics, AI, and machine learning for threat detection - Optional services: penetration testing, security awareness, compliance support, red/purple teaming, staff augmentation, business continuity, security architecture, and software acquisition - Unique or Notable Requirements: - Service model must be co-managed, with close collaboration alongside CMHC IT teams - Must support multi-vendor environments and operate across cloud, hybrid, and on-premises infrastructure - Demonstrated experience with Microsoft Azure Canadian cloud infrastructure is required - Compliance with accessibility, privacy, and data residency requirements (data must remain in Canada) - Adherence to government security standards (e.g., NIST 800-53, SOC 1/2, CSAE 3416, SSAE 18) - Prohibition of forced and child labor in supply chains - Use of Agile methodologies for continuous improvement - OEMs and Vendors Mentioned: - Microsoft (as the OEM for Azure, Sentinel, Defender, and M365 security tools) - No other specific OEMs or vendors are named - Potential Service Locations: - Multiple CMHC offices and business centres across Canada, including Ottawa, Calgary, Toronto, Montreal, Halifax, and Vancouver

Description

Canada Mortgage and Housing Corporation (CMHC) is inviting prospective proponents to qualify for participation in a subsequent Request for Proposal (RFP) for a Co-Managed Service Model for a Security Operations Centre (SOC) and Security Information and Event Management (SIEM) solution. The contract duration is 60 months, and the procurement is open to Canadian suppliers and suppliers from applicable trading partners under trade agreements such as CFTA, CETA, and Canada-UK TCA. The solicitation requires compliance with mandatory corporate and technical requirements, including experience in security monitoring, SIEM management, and data residency within Canada.

View original listing