Confidence In Managing Information Risk

Request for Proposals (RFP) –Confidence in Managing Information Risk  About Farm Credit Canada (FCC): FCC is Canada’s leading agriculture lender, with a healthy portfolio of more than $36 billion. Our employees are dedicated to the future of Canadian agriculture and its role in feeding an ever-growing world. We provide flexible, competitively priced financing, management software, information and knowledge specifically designed for the agriculture and agri-food industry. As a self-sustaining Crown corporation, our profits are reinvested back into the agriculture and food industry we serve and the communities where our customers and employees live and work while providing an appropriate return to our shareholder. For more information, visit www.fcc.ca or follow us on Facebook, LinkedIn, Instagram and on Twitter @FCCagriculture  RFP Scope:  Earlier this year, FCC engaged a third party to conduct two formal maturity assessments resulting in several suggested recommendations. The two assessments are noted below:

Cyber Security Assessment using the NIST Framework  Information Management Assessment using the ARMA Information Governance Maturity Model

FCC also performed a self-assessment on our Privacy Program maturity using Generally Accepted Privacy Principles and the Chartered Professional Accountants template (formerly CICA) which has also resulted in several recommendations.  After reviewing the recommendations from all three assessments, FCC recognized that there are many synergies, similarities, and interdependencies. As a result, one project entitled ‘Confidence in Managing Information Risk’ has been created to bring the necessary deliverables and activities together for implementation purposes (the “Project”). Although still in its infancy, the problem statement and target for the Project have been approved.  There is a risk that the confidentiality, availability, and/or integrity of critical information is vulnerable to compromise by internal or external agents, impeding the ability to serve our customers with confidence.  Target: 100% of the “Crown Jewels” are protected, addressing confidentiality, availability and integrity throughout the entire information lifecycle.  RFP Schedule:

RFP issue date: November 4, 2019  Vendor questions accepted until: November 19, 2019 RFP closing date and time: December 6, 2019 at 2:00 PM

RFP Process Considerations  Vendors should note that:

this opportunity notice references a non-binding, competitive RFP, not a call for tenders. FCC is not obligated to proceed with the work described in the RFP scope, and may cancel the RFP at any time.  FCC’s procurement process allows for negotiation between FCC and one or more vendors, prior to awarding a contract.

Requesting the RFP Document: Capable vendors who are interested in receiving a copy of the RFP document are to contact: Mike Dundas  Manager, Procurement & Vendor Risk Management  Farm Credit Canada procurement@fcc.ca  Note: Vendors do not receive the RFP document by registering for the list of interested suppliers (“LIS”) on buyandsell.ca. Vendors must request the RFP document through FCC’s designated RFP contact.