Third-Party Ongoing Monitoring and Cybersecurity Risks Ratings Solution

Overview

Cybersecurity & Data Privacy

CanadaPosted 29 days agoDeadline: May 4th, 2026

Fit Score

Settle Intelligence

Settle helps teams find, evaluate, and respond to public RFPs. We continuously surface new opportunities, score them against your company strengths, and draft proposal responses so you can focus on the work that wins business.

SUMMARY

Seeking a solution for continuous third-party monitoring and cybersecurity risk ratings to enhance TPRM InfoSec capabilities for a government entity in Quebec.

KEY REQUIREMENTS

Must provide a solution for Third-Party Risk Management (TPRM) InfoSec capabilities
Must provide cybersecurity risk ratings
Must support ongoing monitoring of third-party risks
Must enable a structured, risk-based, and scalable approach to risk management
Must improve efficiency, governance, and visibility for regulatory and organizational requirements

BUDGET

Estimate

$200,000 – $500,000

CONTRACT DURATION

48 months

TIMELINE

Publication Date: April 7th, 2026

Bid Intent Deadline: April 28th, 2026

Question Acceptance Deadline: April 30th, 2026

Closing Date: May 4th, 2026

QUESTION DEADLINE

April 30th, 2026

Issuing Agency

Business Development Bank Of Canada

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

The government authority in Quebec seeks a vendor to provide a third-party ongoing monitoring and cybersecurity risks ratings solution. The selected solution will help modernize and consolidate Third-Party Risk Management (TPRM) InfoSec capabilities, aligning with the organization's broader cybersecurity and operational strategy.

The objective is to implement a structured, risk-based, and scalable approach to managing third-party risks across their lifecycle. The solution should enhance efficiency, governance, and visibility to effectively meet both regulatory and organizational requirements. The contract term is expected to span four years.

Source attribution

This Settle analysis is based on the issuing organization’s public RFP listing.