2019-MD-002 - Confidence In Managing Information Risk (2019-MD-002)

Request for Proposals (RFP) –Confidence in Managing Information Risk 

About Farm Credit Canada (FCC): FCC is Canada’s leading agriculture lender, with a healthy portfolio of more than $36 billion. Our employees are dedicated to the future of Canadian agriculture and its role in feeding an ever-growing world. We provide flexible, competitively priced financing, management software, information and knowledge specifically designed for the agriculture and agri-food industry. As a self-sustaining Crown corporation, our profits are reinvested back into the agriculture and food industry we serve and the communities where our customers and employees live and work while providing an appropriate return to our shareholder. For more information, visit  www.fcc.ca  or follow us on  Facebook ,  LinkedIn ,  Instagram  and on Twitter  @FCCagriculture  

RFP Scope: 

Earlier this year, FCC engaged a third party to conduct two formal maturity assessments resulting in several suggested recommendations. The two assessments are noted below: 

Cyber Security Assessment using the NIST Framework 

Information Management Assessment using the ARMA Information Governance Maturity Model 

FCC also performed a self-assessment on our Privacy Program maturity using Generally Accepted Privacy Principles and the Chartered Professional Accountants template (formerly CICA) which has also resulted in several recommendations. 

After reviewing the recommendations from all three assessments, FCC recognized that there are many synergies, similarities, and interdependencies. As a result, one project entitled ‘Confidence in Managing Information Risk’ has been created to bring the necessary deliverables and activities together for implementation purposes (the “Project”). Although still in its infancy, the problem statement and target for the Project have been approved. 

There is a risk that the confidentiality, availability, and/or integrity of critical information is vulnerable to compromise by internal or external agents, impeding the ability to serve our customers with confidence. 

Target: 100% of the “Crown Jewels” are protected, addressing confidentiality, availability and integrity throughout the entire information lifecycle. 

RFP Schedule: 

RFP issue date: November 4, 2019 

Vendor questions accepted until: November 19, 2019

RFP closing date and time: December 6, 2019 at 2:00 PM

RFP Process Considerations 

Vendors should note that: 

this opportunity notice references a non-binding, competitive RFP, not a call for tenders. FCC is not obligated to proceed with the work described in the RFP scope, and may cancel the RFP at any time. 

FCC’s procurement process allows for negotiation between FCC and one or more vendors, prior to awarding a contract. 

Requesting the RFP Document:

Capable vendors who are interested in receiving a copy of the RFP document are to contact:

Mike Dundas 

Manager, Procurement & Vendor Risk Management 

Farm Credit Canada

procurement@fcc.ca  

Note: Vendors do not receive the RFP document by registering for the list of interested suppliers (“LIS”) on buyandsell.ca. Vendors must request the RFP document through FCC’s designated RFP contact.