Audit of Information Technology (IT) Security (Phase 2)

Requirement Summary

This requirement is open only to those pre-qualified Supply Arrangement Holders who quality under the Stream 3: Information Technology and Systems Audit.

Public Safety Canada (PS) requires professional audit support services to assist in the delivery of an audit of IT Security as identified in PS’s Internal Audit and Evaluation Directorate (IAED) annual Risk-Based Audit and Evaluation Plan.

The following Stream (per Public Services and Procurement Canada’s (PSPC) Professional Audit Support Services Supply Arrangement (PASS-SA) was selected:

Stream 3: Information Technology and Systems Audits

The Contractor is required to work with PS’s Internal Audit and Evaluation Directorate (IAED) in delivering assurance of IT security procedures and infrastructure. The IAED requires a complete team to conduct the engagement.

The preliminary objective is to assess governance, controls and risk management practices supporting IT security. This may include but is not limited to:

• Ensure departmental IT security controls are sufficient to minimize emerging threats; • Ensure the department has access to appropriate and modern technology/tools to carry out responsibilities and adapt to IT security threats; • Uncover systems or procedures that create security weaknesses and identify gaps and vulnerabilities in the department’s IT security program and practices. 2. Period of Work

The period of the Contract is from date of Contract award to May 31, 2024. 3. Evaluation Process and Selection Methodology

Basis of selection –Highest Combined Rating of Technical Merit 70% and Price 30 % Detailed in the RFP, Part 2

4. Intellectual Property

Shall vest with the Public Safety Canada.

5. Security Requirements

Secret security clearance is required.