Security Operations Centre (SOC) and a Security Information and Event Management (SIEM) SOLUTION

PROCUREMENT OVERVIEW

The Canada Mortgage and Housing Corporation (CMHC) is seeking to establish a Co-Managed Service Model for a Security Operations Centre (SOC) and a Security Information and Event Management (SIEM) solution. The objective is to enhance CMHC's cybersecurity posture by implementing a robust SOC and SIEM system that will monitor, detect, and respond to security threats in real-time. This initiative aims to protect sensitive housing data and ensure compliance with relevant security standards.

ISSUING ORGANIZATION

The issuing organization is Canada Mortgage and Housing Corporation (CMHC), located in Ottawa, Ontario, Canada. The primary contact for this opportunity is Ryan Lemay, Senior Procurement Officer, who can be reached at [email protected].

TECHNICAL CAPABILITIES

Bidders should possess expertise in:

• Security Operations Centre (SOC) management
• Security Information and Event Management (SIEM) technologies
• Vulnerability assessment and security software
• Cloud-based security solutions
• Network and internet security protocols

DELIVERABLES AND PERFORMANCE STANDARDS

The deliverables include the establishment of a fully operational SOC and SIEM system, with ongoing monitoring and incident response capabilities. Specific performance metrics and service-level agreements will be defined in the subsequent RFP.

EVALUATION CRITERIA

Proposals will be evaluated based on the following criteria:

• Technical Approach: The effectiveness and feasibility of the proposed SOC and SIEM solution.
• Past Performance: Demonstrated experience and success in similar projects.
• Price: Cost-effectiveness of the proposal.
• Additional points may be awarded for Canadian content as per government policy.

PREFERRED QUALIFICATIONS

While not mandatory, the following qualifications may provide a competitive advantage:

• Advanced certifications in cybersecurity (e.g., CISSP, CISM)
• Proven experience with government or public sector cybersecurity projects
• Familiarity with Canadian regulations and compliance standards related to cybersecurity

This summary provides a comprehensive overview for potential bidders to assess their fit for the CMHC SOC and SIEM opportunity.