Employee Activity and Information Access Monitoring On Enterprise Applications Software (EAIAMS)

Trade Agreement: NONE Tendering Procedures: All interested suppliers may submit a bid Competitive Procurement Strategy: Best Overall Proposal Comprehensive Land Claim Agreement: No Nature of Requirements:

Employee Activity and Information Access Monitoring On Enterprise Applications Software (EAIAMS)

G9292-211695/A Fenwick, Wesley Telephone No. - (613) 720-7743 ( )

Line 1, Application Software-RFI

Employee and Social Development Canada (ESDC) is a department of the Government of Canada responsible for social programs and the labour market at the federal level. ESDC’s mission is to build a stronger and more inclusive Canada, to support Canadians in helping them live productive and rewarding lives and improving Canadians' quality of life.

ESDC delivers a range of programs and services that affect Canadians throughout their lives. The Department provides seniors with basic income security, supports unemployed workers, helps students finance their post-secondary education and assists parents who are raising young children. The Labour Program contributes to social and economic well-being by fostering safe, healthy, fair and inclusive work environments and cooperative workplace relations in the federal jurisdiction. Service Canada helps citizens access ESDC's programs, as well as other Government of Canada programs and services.

In particular, the Department is responsible for delivering over $120 billion in benefits directly to individuals and organizations through such Government of Canada programs and services as Employment Insurance, Old Age Security, the Canada Pension Plan and the Canada Student Loans Program. The Department also provides $1.8 billion in funding to other orders of government, educators and organizations in the voluntary and private sectors.

ESDC is exploring market offerings to monitor and analyze enterprise application activity in order to detect and manage potential incidents of inappropriate internal access or use of information. Initially, the department would like to use the technology on 2-3 major in-house, custom-developed, enterprise applications, with a plan to take a risk-based approach in extending the technology and capability to additional enterprise applications. As the software solution is expected to evolve and mature over time, ESDC will expect to continue uninterrupted access, usage, and development of the product across the solution’s lifespan.

Based on the department’s requirements, ESDC is exploring Security Information and Event Management (SIEM) and/or Employee Monitoring (EM) technologies to address this risk. The department is looking for a solution that:

I. Monitors specified applications and detect incidents of inappropriate information access using (a) defined business rules, and (b) advanced analytical capabilities to flag potential incidents independent of predefined business rules for users accessing enterprise applications II. Utilize a broad range of data sources (such as log files including O/S event logs, database records, flat files, vendor specific APIs, Cloud / SaaS sources etc.) to detect potential cases of information misuse and malfeasance as users perform transactions. III. User-centric analysis that flags potential incidents based on user activity/behavior patterns and information across devices, applications, and information sources, so that they can be investigated. IV. Ability to monitor and detect potential incidents independent of the use of log files to recognize patterns of user behaviour with enterprise applications. V. Produces irrefutable evidence that is efficient to review and understand by investigators and department managers which confirm whether inappropriate information access or use has occurred. VI. Automatically take defined actions based on triggers (e.g. auto-notifications to users of potentially inappropriate behavior) in support of operational and investigative efficiency VII. Classifies incidents to enable triaging incidents based on level of risk to support efficiencies and workflows and workloads for investigators. VIII. Integrates with existing case management solutions utilized within ESDC (and/or have case management capabilities that can be utilized broadly by the department). ESDC has existing case management system in place. IX. Is accompanied with managed services will be needed to support ESDC’s operational readiness, implementation, configuration, integrations, training, and application support. ESDC needs to be able to implement the solution quickly and review the operational considerations and options to support a software or service. X. Has data residency in Canada, bilingual capabilities in English and French, and meets the accessibility requirements of the Government of Canada. Data must reside in Canada and is protected B. XI. Has the ability to be leveraged by other Government of Canada Departments, Agencies, and Crown Corporations and/ or Provincial Crown entities. Delivery Date: Above-mentioned

The Crown retains the right to negotiate with suppliers on any procurement.

Documents may be submitted in either official language of Canada.