When is the submission deadline?

Submissions are due August 28, 2026. Questions must be submitted by August 21, 2026.

What is the budget for this RFP?

The published budget is $70,000.

It was issued by Capital Regional District. The work is located in Victoria, British Columbia, Canada.

Who is a good fit for this opportunity?

Cybersecurity technology providers with enterprise vulnerability management and patch management expertise. Firms experienced in solution architecture, system integration, API implementation, and data migration. Vendors with experience delivering compliance reporting, remediation tracking, and security operations platforms. Organizations capable of providing administrator training, operational knowledge transfer, and technical documentation.

Vulnerability Scanning and Patching Solution (Due August 28, 2026)

Overview

Cybersecurity & Data Privacy

Victoria, British Columbia, CanadaPosted: August 8, 2026Deadline: August 28, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

The organization seeks an integrated vulnerability assessment, asset discovery, compliance reporting, remediation tracking, and patch management solution. The engagement covers requirements validation, architecture, implementation, integrations, migration, training, and documentation.

KEY REQUIREMENTS

Must have demonstrated vulnerability management and patch management capabilities
SaaS solution must support Canadian public-sector privacy requirements
Must support Windows and Linux environments
Must be able to integrate with required enterprise technologies
Must provide a minimum of 3 similar customer references
Must submit technical and financial proposals in two separate files
Must achieve a minimum technical score of 70% (49/70 points)
Must comply with FOIPPA and Canadian data residency requirements
Must provide professional liability insurance with a limit of not less than $500,000 per claim and $1,000,000 aggregate

BUDGET

Verified

$70,000

CONTRACT DURATION

60 months

TIMELINE

RFP Issued: August 7th, 2026

Inquiry Deadline: August 21st, 2026

Closing Time: August 28th, 2026

QUESTION DEADLINE

August 21, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

Capital Regional District

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

The organization is seeking a vendor to provide an integrated vulnerability scanning and patch management solution to support enterprise cybersecurity operations. The solution must include vulnerability assessment, asset discovery, compliance reporting, remediation tracking, and patch management capabilities.

The selected vendor will conduct stakeholder workshops, validate business and technical requirements, and assess the current vulnerability management environment. Services will include developing a target-state architecture, designing system integrations and data flows, defining security, compliance, and reporting requirements, and identifying implementation and infrastructure prerequisites.

Implementation responsibilities will include configuring the proposed solution, deploying vulnerability assessment and patch management capabilities, and integrating the platform with approved enterprise systems, including API-based integrations where required. The vendor will also transition applicable asset inventories, migrate scanning policies and configurations, and transfer relevant reporting structures and dashboards.

The engagement will include administrator and operational training, along with training materials and supporting documentation.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due August 28, 2026. Questions must be submitted by August 21, 2026.
What is the budget for this RFP?: The published budget is $70,000.
Who issued this RFP?: It was issued by Capital Regional District. The work is located in Victoria, British Columbia, Canada.
Who is a good fit for this opportunity?: Cybersecurity technology providers with enterprise vulnerability management and patch management expertise
Firms experienced in solution architecture, system integration, API implementation, and data migration
Vendors with experience delivering compliance reporting, remediation tracking, and security operations platforms
Organizations capable of providing administrator training, operational knowledge transfer, and technical documentation

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works