# CanadaBuys #202703271

Public Safety Canada Seeks Task-Based Cybersecurity Services

**Posted:** October 20, 2026
**Respond By:** November 23, 2026
**Identifier:** 202703271
**NAICS:** 541512

Public Safety Canada’s Digital Services Directorate is seeking task-based cybersecurity expertise for departmental systems and technology initiatives.
- **Buyer:** Public Safety Canada, Digital Services Directorate.
- **OEMs and named vendors:** No OEMs, manufacturers, or service-provider vendors are named in the requirement.
- **Services requested:**
  - Security assessment, authorization, and authorization-to-operate (ATO) package preparation, with up to 40 ATO packages anticipated.
  - Security architecture and secure-design reviews, including threat models, data-flow and network designs, and implementation validation.
  - Vulnerability assessments, penetration testing, remediation recommendations, and retesting.
  - Incident readiness, exercises, investigations, recovery planning, and post-incident improvement; continuous on-call response is excluded.
- **Workforce categories:** TBIPS C.3 Levels 2–3, C.7 Level 3, C.8 Levels 2–3, C.11 Level 3, and C.12 Level 3.
- **Key requirements:** Deliverables must provide evidence, traceability, and acceptance criteria. Penetration testing requires approved scope and rules of engagement, plus written authorization before testing. Work is ordered through task authorizations, with no guaranteed volume; the contractor must be able to handle concurrent assignments.
- **Term:** Initial period from award through the stated contract-end milestone, with up to two one-year extension options.

### Description

Public Safety Canada is seeking task-based IT professional services for defined security assessment, authorization, architecture, testing, remediation-validation, and incident-readiness work. Services will apply to identified departmental systems, applications, cloud services, networks, and technology initiatives. The contractor will manage its personnel and work methods and provide complete, accepted deliverables, with capacity to perform multiple concurrent Task Authorizations when authorized. The solicitation is an open competitive RFP against a supply arrangement, with a 12-month estimated duration and delivery in the National Capital Region.

[View original listing](https://canadabuys.canada.ca/en/tender-opportunities/tender-notice/cb-953-98325012)