Question 1

What is "RFP - 25-041 - Cybersecurity Culture and Behavior program"?

Accepted Answer

**Opportunity Summary: RFP - 25-041 - Cybersecurity Culture and Behavior Program**

**Issuing Organization:**  
Export Development Canada (EDC)  
Location: Ottawa, Ontario, Canada  
Contact: Houssam Hannat (hhannat@edc.ca)

**Important Dates:**  
- Posted Date: February 12, 2026  
- Due Date: March 13, 2026

**Project Scope and Objectives:**  
EDC seeks external support to sustain and enhance its cybersecurity culture initiatives. The chosen proponent will work collaboratively with EDC to deliver key components including:  
- Phishing simulations  
- Human risk reporting  
- Engaging awareness content  
- A targeted program aimed at reducing repeat phishing click rates

These initiatives aim to foster a cyber-conscious workforce that is vigilant and equipped to address evolving cybersecurity threats.

**Contract Type and Estimated Value:**  
- The contract type is not specified in the provided information.  
- Estimated value is also not mentioned.

**Mandatory Qualifications:**  
- Proposals must demonstrate expertise in cybersecurity culture and behavior programs, particularly with a focus on phishing simulations and awareness training.

**Preferred Qualifications:**  
- Previous experience in delivering similar cybersecurity programs for organizations of comparable size or in similar sectors.  
- Evidence of impactful results from past initiatives that improved cybersecurity awareness and reduced phishing click rates.

**Geographic Restrictions:**  
- Not specified in the provided information.

**Key Technical Capabilities Needed:**  
- Proven methodologies for conducting realistic phishing simulations.  
- Analytical capabilities for generating insightful human risk reports.  
- Ability to create and deliver engaging cybersecurity awareness content.

**Deliverables and Performance Standards:**  
- Execution of planned phishing simulation exercises.  
- Detailed reporting on human risk exposure and improvement metrics.  
- Creation of engaging training materials and content that resonate with users.  
- Specific performance benchmarks regarding reduction in phishing susceptibility to be established in collaboration with EDC.

**Evaluation Criteria:**  
- Proposals will be evaluated based on the effectiveness and innovation of proposed methodologies, relevant experience, ability to deliver quality content, and past performance metrics.

Interested parties can access the bidding documents on http://www.merx.com, noting that fees may apply as indicated at https://www.merx.com/public/pricing.

Question 2

When is the proposal submission deadline?

Accepted Answer

The proposal submission deadline is March 13, 2026 (24 days left).

Question 3

Where can I submit a proposal or get solicitation documents?

Accepted Answer

You can access the full solicitation documents and submit your proposal at: https://www.merx.com/public/solicitations/3841263508/abstract?language=EN

RFP - 25-041 - Cybersecurity Culture and Behavior program

Actions

Documents

Description

Additional Information

Source

Source Record ID

Source URL

Status

Is Public

Created

Last Updated

Contact Info Name

Contact Info Email

Contact Info Phone

Organization Address Line

Organization Address City

Organization Address Province

Organization Address Postal Code

Organization Country

Procurement Method

Source System

Reference Number

Amendment Number

Tender Closing Date

Status En

Contracting Entity Name

Procurement Category

Summary Updated At

Frequently Asked Questions

AI Summary

Explore More Opportunities