2018-034-OP - Cyber Security Maturity Assessment

Tender Notice
RFP 2018-034-OP
Cyber Security Maturity Assessment
 
 
Procuring Entity: Ryerson University
 
Address:
Ryerson University
Purchasing Services
350 Victoria Street
Toronto, Ontario
Canada, M5B 2K3
 
Description:
This Request for Proposal is an invitation to prospective Proponents for submissions for services to perform Cyber-security maturity assessments including recommendations for improvements using the ISO 27002:2013 framework and the Capability Maturity Model (CMMI) maturity rating system. The scope of this assessment will be University wide and include several different departments and faculties.
 
The office of Ryerson’s Computing and Communication Services (“CCS”) will require the Successful Proponent to review the current maturity of Ryerson’s Cyber security for 2018 and repeat the review for the years 2019 and 2020, as well as measure improvements year over year.
 
Timing of Subsequent Notices:
Not applicable.
 
Tendering Website:
Suppliers will find the tender documents at: https://www.merx.com/
Pricing and Payment Terms are available on the MERX website.
 
Procurement Method:
Open tender whereby all interested suppliers may submit a response.
 
Estimated Quantities:
Available within the tender document.
 
Submission Details:
Suppliers shall submit their response using Bonfire at: http://ryerson.bonfirehub.ca
 
Submission Deadline:
Closing Date is April 9 2018.
 
Public Opening:
Not Applicable.
 
Conditions for Participation:
Insurance Requirements
The Supplier shall carry at all times during the performance of the Services, including any warranty period at its own cost and expense, the following minimum insurance:

1. Commercial General Liability Insurance against third party bodily injury (including death), personal injury and broad form property damage (including loss of use) and including products and completed operations liability and blanket contractual liability for an amount of not less than five million dollars ($5,000,000.00) per occurrence.  Such insurance shall include a cross liability and severability of interests clause and an endorsement naming Ryerson University, its governors, trustees, officers and employees as an Additional Insured;
2. Standard automobile insurance for all vehicles owned, licensed or leased by the Supplier and non-owned automobile insurance, where required, for an amount of not less than two million dollars ($2,000,000.00), per occurrence for each type of coverage. Where the non-owned automobile insurance coverage is provided within a general liability policy, a separate policy is not required;
3. Professional liability insurance for an amount of not less than five million dollars ($5,000,000.00) per occurrence, if applicable to the type of Services offered under this Agreement. This insurance policy is required to be maintained throughout the Term of the Agreement and for a period of twenty-four (24) months after the completion of the Services;
4. Cyber and Privacy Liability covering actual or alleged acts, errors or omissions committed by the Supplier, its agents or employees.  The policy shall also extend to include the intentional, fraudulent or criminal acts of the Supplier, its agents or employees.

1. unauthorized use/access of a computer system
2. defense of any regulatory action involving a breach of privacy
3. failure to protect confidential information (personal and commercial information) from disclosure
4. notification costs, whether or not required by statute; and
5. Such other types of insurance as would be carried by a prudent person or as Ryerson may from time to time require, having regard for the nature of the Services and its location.

1. RFP Appendix C - Proposal Acknowledgement Form

1. Company Information
2. Experience
3. Project Management Team
4. RFP Appendix D - Pricing

• Chapter 9 of the Ontario-Quebec Trade and Cooperation Agreement
• Chapter 5 of the Canadian Free Trade Agreement
• Chapter 19 of the Comprehensive Economic and Trade Agreement between Canada and the European Union