CDIC is a federal Crown corporation with headquarters in Ottawa and is responsible for providing insurance against the loss of part or all of deposits and for promoting and otherwise contributing to the stability of the financial system in Canada. These objectives are pursued for the benefit of persons having deposits with CDIC member institutions and in such a manner as will minimize the exposure of CDIC to loss. CDIC is also the resolution authority for its member institutions. As CDIC continues to evolve its technology ecosystem including its cyber security capabilities and overall maturity, and as part of this continuous improvement approach, CDIC is planning to procure a suite of managed security services from a managed security services provider.By this open Notice of Proposed Procurement (NPP), the CDIC is announcing its intention to issue a Negotiated Request for Proposals (NRFP) on or about November 1, 2021 and inviting technically experienced and financially stable and capable vendors to submit their interest in responding to a subsequent Negotiable Request for Proposal (NRFP) for managed security services, including, but not limited to, some or most of the following:Managed Detection and Response; - Detection and Blocking (endpoint, network, log, SIEM); -Incident Response; Forensics Retainer Services (Optional); Managed IAM/PAM (Optional); Managed EDR; Security Appliance Management; Continuous Penetration Testing; Vulnerability Management; and Security Patch Management. The term of the resulting contract will be for an initial period of three years with three additional one-year option periods at CDIC’s sole and absolute option. Vendors having submitted a responsive Expression of Interest will be sent a Non-Disclosure Agreement executed by CDIC and will be required to complete, sign and return a Non-Disclosure Agreement by the Deadline specified in order to receive the NRFP.Please see the NPP for all details related to this NPP.
