Information Technology and System Audits

NOTICE OF PROPOSED PROCUREMENT (NPP) PROFESSIONAL AUDIT SUPPORT SERVICES (PASS) SUPPLY ARRANGEMENT Solicitation No.: IC401685 Contracting Authority: Eric Leroux Telephone No.: 343-291-2925 E-mail Address: eric.leroux@canada.ca This RFP is only for pre-qualified Suppliers for Stream 3. Information Technology and System Audits against Professional Audit Support Services (PASS) Supply Arrangement (E60ZG-060004) The following SA Holders have been invited to submit a proposal under Stream 3: Information Technology and System Audits:

A Hundred Answers Inc. BDO Canada LLP Deloitte LLP Ernst & Young LLP KPMG LLP Orbis Risk Consulting Inc. Pricewaterhouse Coopers LLP Raymond Chabot Grant Thornton Consulting Inc. Samson & Associés CPA/Consultation Inc.

DESCRIPTION OF REQUIREMENT: Innovation, Science and Economic Development Canada (ISED) requires the services of a Contractor pre-qualified under the Professional Audit Support Services (PASS) Supply Arrangement who can provide a team of auditors under the Information Technology and Systems Audits stream, on an as and when required basis, to work with the Internal Audit Directorate in preparing and carrying out the Departmental audit plan. DURATION OF CONTRACT The initial Contract period is from date of Contract award for a period of two (2) years with the option to extend the term of the Contract by up to two (2) additional one year period(s) under the same conditions. SECURITY REQUIREMENTS Common PS SRCL #23 Security Clauses: SECURITY REQUIREMENT FOR CANADIAN SUPPLIER: PWGSC FILE # COMMON-PS-SRCL#23

The Contractor/Offeror must, at all times during the performance of the Contract/Standing Offer/Supply Arrangement, hold a valid Facility Security Clearance at the level of SECRET, with approved Document safeguarding at the level of SECRET, issued by the Canadian Industrial Security Directorate (CISD), Public Works and Government Services Canada (PWGSC). The Contractor/Offeror personnel requiring access to PROTECTED/CLASSIFIED information, assets or sensitive work site(s) must EACH hold a valid personnel security screening at the level of RELIABILITY STATUS, CONFIDENTIAL or SECRET as required, granted or approved by the CISD, PWGSC. The Contractor MUST NOT utilize its Information Technology systems to electronically process, produce or store any sensitive PROTECTED/CLASSIFIED information until CISD/PWGSC has issued written approval. After approval has been granted, these tasks may be performed up to the level of SECRET. Subcontracts which contain security requirements are NOT to be awarded without the prior written permission of CISD/PWGSC. The Contractor/Offeror must comply with the provisions of the: Security Requirements Check List and security guide (if applicable), attached at Annex _____;

Industrial Security Manual (Latest Edition).NOTE: There are multiple levels of personnel security screenings associated with this file. In this instance, a Security Classification Guide must be added to the SRCL clarifying these screenings. The Security Classification Guide is normally generated by the organization's project authority and/or security authority.