Security Operations Centre (SOC) and a Security Information and Event Management (SIEM) SOLUTION

PROCUREMENT OVERVIEW

The Canada Mortgage and Housing Corporation (CMHC) is seeking to procure a Co-Managed Service Model for a Security Operations Centre (SOC) and a Security Information and Event Management (SIEM) solution. The primary objective is to enhance CMHC's security posture by implementing a robust SOC and SIEM solution that can effectively monitor, detect, and respond to security incidents. This initiative aligns with CMHC's mandate to ensure secure and reliable operations as a Crown Corporation responsible for facilitating access to affordable housing options for Canadians.

ISSUING ORGANIZATION

• Organization Name: Canada Mortgage and Housing Corporation (CMHC)
• Location: Ottawa, Ontario, Canada
• Primary Contact: Ryan Lemay
• Email: [email protected]

TECHNICAL CAPABILITIES

Proponents should possess expertise in:

• Security Operations Centre (SOC) operations
• Security Information and Event Management (SIEM) solutions
• Vulnerability assessment and security equipment
• Cloud-based security software
• Network and internet security protocols

DELIVERABLES AND PERFORMANCE STANDARDS

Key deliverables include:

• Implementation of a SOC and SIEM solution as part of a co-managed service model.
• Ongoing monitoring and incident response capabilities.
• Specific performance metrics and service-level agreements will be defined in the subsequent RFP process.

EVALUATION CRITERIA

Proposals will be evaluated based on:

• Mandatory Corporate and Technical Requirements (Stage I).
• The criteria for selection will prioritize Canadian content and value-added services.
• The weighting of evaluation factors (e.g., technical approach, past performance, price) will be detailed in the RFP.

PREFERRED QUALIFICATIONS

While not mandatory, the following qualifications may provide a competitive advantage:

• Experience in managing SOC and SIEM solutions for similar organizations.
• Preferred certifications related to cybersecurity practices.
• Demonstrated ability to deliver Canadian content and value-added services.

This summary provides a comprehensive overview for potential bidders to assess their fit for the CMHC SOC and SIEM opportunity.