Cyber Protection Services

NOTICE OF PROPOSED PROCUREMENT (NPP) For TASK BASED INFORMATICS PROFESSIONAL SERVICES (TBIPS) GSIN: D302A ADP SYSTEM DEVELOPMENT SERVICES

Reference Number: N/A Solicitation Number: FP802-150222 Organization Name: Department of Fisheries Canada - Application Development/Database/Data Administration-West-Central Solicitation Date: 2016-04-22 Closing Date: 2016-05-10 2:00 PM Eastern Daylight Time EDT Anticipated Start Date: 2016-05-30

Estimated Delivery Date: TBD Estimate Level of Effort: 750 days for all resources Contract Duration: The contract period will be for one (1) year from the date of contract with an irrevocable option to extend it for up to two additional one-year periods Solicitation Method: Competitive Applicable Trade Agreements: WTO-AGP, NAFTA, AIT… Comprehensive Land Claim Agreement Applies: No Number of Contracts: 1 Requirement Details Tendering Procedure: Selective Tendering This requirement is open only to those TBIPS Supply Arrangement Holders who qualified under Tier 1 for services in the National Capital Region for the following categories: STREAM 6: Resource Category Level of Expertise Estimated Number of Resources Required C.3 IT Security TRA and C&A Analyst LEVEL3 1 RESOURCE C.3 IT Security TRA and C&A Analyst, Bilingual, French and English (both spoken and written) LEVEL 3 1 RESOURCE C.7 IT Security Design Specialist LEVEL 3 2 RESOURCES C.2 IT Security Methodology, Policy, and Procedures Analyst LEVEL 3 1 RESOURCE C.11 IT Security Vulnerability Assessment Specialist LEVEL 3 1 RESOURCE C.15 Computer Forensics Specialist LEVEL 3 1 RESOURCE The following SA Holders have been invited to submit a proposal: ADGA Group Consultants Inc. CGI Information Systems & Mgt. Consultants Inc. Cistel Technology Inc. Contract Community Inc. Coradix Technology Consulting Ltd. Dalian Ent. & Coradix Technology Consulting Deloitte Inc. DWP Solutions Inc. Emerion 14C Information Technology Consulting Inc. IBM Canada Ltd. IPSS Inc. IT/NET Ottawa Inc., KPMG LLP Lockheed Martin Canada Inc. Phirelight Security Solutions Inc. Quallium Corpration TELUS Communications Inc. The Halifax Group Inc. Transpolar Technology Corporation and the Halifax Computer Consulting TRM Technologies The Bell Telephone Company of Canada or Bell Canada / La Compagnie de Téléphone Bell du Canada ou Bell Canada Description of Work: The Department of Fisheries and Oceans require a team of IT Security professional services to support IT Projects including projects for Identity and Access Management Solutions and Enterprise Security Solutions. The scope of the work will include the following: 1. Create risk management documentation for programs and systems that follow ITSG-33 guidelines and procedures (https://www.cse-cst.gc.ca/en/publication/itsg-33) such as System Profile Descriptions, System IT Security Audit Reports, Threat and Risk Assessments and Technical Vulnerability Assessments etc.; 2. Create system development documents for programs, systems, or services such as Concepts of Operation, Security Architectures, Security Requirements Definitions, 3. Create, review or collaboration on policy, directives, standards or procedures related to IM & IT security; 4. Provide IM & IT security advice, guidance or recommendations in direct or indirect support of DFO program objectives; 5. Provide IT operational support services related to incident management, monitoring, response or recovery including as well as computer forensics and Technical Vulnerability Assessments; 6. Depending on the desired Assurance Level, develops one or more of the following: Concept of Operations, Statement of Sensitivity and System Security Plan, Security Requirements Traceability Matrix (SRTM), Threat and Risk Assessment, Detailed Design/System or Security Architecture, System/Security Test Plan, System/Security Test Results, Technical Vulnerability Assessment (TVA), Statement of Residual Risk (SRR), Security Assessment Evidence Package, Security Assessment Report. On an “as and when requested” basis, the Contractor must perform the tasks and produce the deliverables specified in each applicable TA.

Bidders must submit a bid for all resource categories The work is currently not being performed by a contracted resource

Security Requirement: Common PS SRCL #22 applies Minimum Corporate Security Required: Designated Organization Screening (DOS) Minimum Resource Security Required: Enhanced Reliability Contract Authority Name: Beverly Shawana Phone Number: 613-949-1490 Email Address: Beverly.shawana@dfo-mpo.gc.ca

Inquiries Inquiries regarding this RFP requirement must be submitted to the Contracting Authority named above. Request for Proposal (RFP) documents will be e-mailed directly from the Contracting Authority to the Qualified Supply Arrangement Holders who are being invited to bid on this requirement. BIDDERS ARE ADVISED THAT “BUYANDSELL.GC.CA” IS NOT RESPONSIBLE FOR THE DISTRIBUTION OF SOLICITATION DOCUMENTS. The Crown retains the right to negotiate with any supplier on any procurement. Documents may be submitted in either official language. NOTE: Task-Based Informatics Professional Services (TBIPS) Method of Supply is refreshed three (3) times per year.If you wish to find out how you can be a “Qualified SA Holder”, please contact RCNMDAI.-NCRIMOS