What the buyer needs

AI summary

The contract period is for four years. All questions must be submitted no later than December 1, 2026.

Scope of work

Software, licences, subscriptions, hosting, and content updates
Project management, discovery, planning, and solution design
Implementation, configuration, integration, and deployment
Initial security-validation exercise and results package
Testing, validation, and acceptance activities
Documentation, operational runbooks, and transition-to-operations package
Training and knowledge-transfer services
Ongoing technical support, maintenance, incident management, and defect resolution

Criterion	Weight / scoring
Experience and Qualifications	15
Integration and Compatibility Capabilities	10 Points
Security Validation Capabilities	5 Points
Attack Path Analysis and Exposure Identification	5 Points
Reporting, Analytics, and Remediation Guidance	5 Points
Administration and Operational Management	5 Points
Proposed Solution and Available Capabilities	5 Points
Implementation and Project Management Approach	5 Points
Solution Implementation, Integration, and Testing Approach	5 Points
Support Model and Service Levels	5 points
Maintenance, Product Evolution, and Ongoing Service Improvement	5 points
Pricing	30 points

Proof of corporate registration
Proof of current ISO/IEC 27001 certification
Current SOC 2 Type 2 report covering all five Trust Services Criteria
Proposed solution and all required functionality must be commercially available as of the Submission Deadline
Onshore (Canada Only)

Method: Electronic via Bonfire portal (https://aglc.bonfirehub.ca/portal/)
Instructions: Compile proposal into two files: one containing only Pricing (Appendix C) and the other containing the proposal without any pricing.