Opportunity
CanadaBuys #20260699
Security Assessment and Authorization Services for Microsoft 365 Copilot – Office of the Auditor General of Canada
Posted
August 10, 2026
Respond By
August 25, 2026
Identifier
20260699
NAICS
541690
The Office of the Auditor General of Canada (OAG) is seeking independent security assessment and authorization services for Microsoft 365 Copilot within its Microsoft 365 tenant environment. - Government Buyer: - Office of the Auditor General of Canada (OAG), Government of Canada - OEMs and Vendors: - Microsoft (OEM for Microsoft 365 Copilot) - Products/Services Requested: - Security Assessment and Authorization for Microsoft 365 Copilot and related services - Includes threat and risk evaluation, compliance assessment, data residency review, governance and privacy evaluation, and preparation of documentation for security authorization - Alignment with Canadian government cybersecurity standards (ITSG-33, NIST) - Assessment of Protected B information readiness - Delivery of detailed reports, remediation roadmap, and executive briefings - Unique/Notable Requirements: - Supplier and personnel must hold appropriate security clearances - Compliance with Canadian procurement and cybersecurity policies - Potential requirement for greenhouse gas emissions disclosure and reduction targets - Selection based on technical merit and price - All deliverables must be completed and accepted by March 31, 2027 - No physical goods or part numbers; focus is on consulting and evaluation services
Description
Canada is seeking offers from Offerors to provide Security Assessment and Authorization for Microsoft 365 Copilot and related services as described in the Annex A – Statement of Work to the Office of the Auditor General of Canada (OAG). The contract duration is 6 months, starting from September 7, 2026, to March 31, 2027. The procurement method is competitive open bidding, with selection based on the highest combined rating of technical merit and price. The solicitation is open to Canadian suppliers and suppliers from partner countries as defined in the reciprocal procurement policy.