Cyber Security Maturity Assessment Services

Overview

Cybersecurity & Data Privacy

Burlington, Ontario, CanadaPosted 27 days agoDeadline: April 28th, 2026

Fit Score

Settle Intelligence

Settle helps teams find, evaluate, and respond to public RFPs. We continuously surface new opportunities, score them against your company strengths, and draft proposal responses so you can focus on the work that wins business.

SUMMARY

Ontario government authority seeks a vendor to perform a cyber security maturity assessment across a range of IT domains, including assets, identity management, network security, and compliance.

KEY REQUIREMENTS

Must have experience performing assessments using the CIS Controls framework
Must have experience with CIS Controls version 8.1
Must provide three references for work completed within the last five years for governmental entities or organizations of comparable size and complexity
Must maintain technology errors and omissions and/or cyber liability insurance with limits of not less than CAD $1,000,000
Must be registered as a plan taker in the Bidding System
Must submit the bid electronically through the Bidding System
Must provide a project-specific organization chart identifying key personnel
Must provide narrative case studies of similar services provided within the past five years

BUDGET

Estimate

$50,000 – $150,000

CONTRACT DURATION

4 months

TIMELINE

Issue Date: April 10th, 2026

Deadline for questions: April 21st, 2026

Closing Time: April 28th, 2026

Award: Mid-May, 2026

Project Commencement: May 2026

Project Completion: September 2026

QUESTION DEADLINE

April 21st, 2026

Issuing Agency

City Of Burlington

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

A government authority in Ontario, Canada seeks a qualified vendor to conduct a comprehensive cyber security maturity assessment. The scope of work includes evaluation of enterprise asset management spanning hardware, software, and cloud infrastructure, as well as identity and access management systems.

The assessment will also cover network and system security administration, endpoint and end-user computing, use of cloud and SaaS platforms, application development support, data security, information management, and governance. The vendor will review current policies, standards, and operating procedures and assess security monitoring, logging, and incident response capabilities. Additional focus areas include vulnerability management, secure configuration, risk management, compliance activities, IT continuity, backup, and disaster recovery.

Interested vendors should submit all questions by April 21, 2026.

Source attribution

This Settle analysis is based on the issuing organization’s public RFP listing.