SRC is inviting quotations for the Security Consulting Services (“the Project”).

When mutually agreeable between SRC and the successful Respondent, any resulting agreement may be extended to cover additional related requirements for the next approximate five (5) year period.

The purpose of this Request for Quotations (RFQ) is to identify respondents able to meet SRC’s requirements in an economical and timely manner, and to identify a respondent with whom the Proposed Agreement can be executed.

SRC will evaluate and identify the quotation that provides the best overall value to SRC, including but not limited to aspects pertaining to technical features and options, qualifications and experience, Indigenous inclusion, pricing, delivery schedule, after sales support, references, clarifications, negotiations and any other aspect of the products or services quoted, as determined by SRC in its sole discretion.

Notwithstanding any provisions otherwise stated herein, it is the intention of SRC to award to one Respondent.

The selected vendor will perform a comprehensive Threat and Risk Assessment encompassing both cybersecurity and physical security domains. The work should follow an established and recognized methodology, preferably the Harmonized Threat Risk Assessment (HTRA) framework developed by the Government of Canada (RCMP/CSE), or an equivalent such as NIST CSF, ensuring compatibility with SRC’s enterprise risk management practices.

The Threat Risk Assessment (TRA) will include at a minimum:

4.2.1 Planning and Initiation

4.2.2 Cybersecurity Assessment

4.2.3 Physical Security Assessment

4.2.4 Risk Analysis

4.2.5 Recommendations and Roadmap

4.2.6 Deliverables

4.2.7 Project Management and Communication

Please see the competition documents (attached) for more informatiom/