Opportunity
Merx #PRCP0003246
Third-Party Ongoing Monitoring and Cybersecurity Risks Ratings Solution for BDC
Posted
April 07, 2026
Respond By
May 05, 2026
Identifier
PRCP0003246
NAICS
541512
The Business Development Bank of Canada (BDC) is seeking a comprehensive solution to enhance its Third-Party Risk Management (TPRM) and cybersecurity risk monitoring capabilities. - Government Buyer: - Business Development Bank of Canada (BDC) - Products/Services Requested: - Third-Party Ongoing Monitoring and Cybersecurity Risks Ratings Solution - Purpose: Modernize and consolidate TPRM InfoSec capabilities - Requirements: - Structured, risk-based, and scalable management of third-party risks - Enhanced efficiency, governance, and visibility - Support for regulatory and organizational compliance - OEMs and Vendors: - No specific OEMs or vendors are named in the solicitation - Unique or Notable Requirements: - Solution must address the entire third-party risk lifecycle - Focus on ongoing monitoring and risk ratings - Must be adaptable to BDC's regulatory and organizational needs - Period of Performance: - Initial contract duration of 4 years - Option for an additional 48 months (total potential duration: 8 years) - Place of Performance: - Business Development Bank of Canada (federal office) - All of Canada (nationwide coverage)
Description
The Business Development Bank of Canada (BDC) is seeking proposals for a solution to modernize and consolidate its Third-Party Risk Management (TPRM) InfoSec capabilities. The goal is to implement a structured, risk-based, and scalable approach to managing third-party risks throughout their lifecycle. This initiative aims to improve efficiency, governance, and visibility in support of regulatory and organizational requirements. The contract duration is 4 years with an option for an additional 48 months.