Forensic Services

ABOUT FCC FCC is Canada’s leading agriculture and food lender, dedicated to the industry that feeds the world. FCC employees are committed to the long-standing success of those who produce and process Canadian food by providing flexible financing, AgExpert business management software, information and knowledge. FCC provides a complement of expertise and services designed to support the complex and evolving needs of food businesses. As a financial Crown corporation, FCC is a stable partner that reinvests profits back into the industry and communities it serves. For more information, visit fcc.ca. RFP CONTACT Ronke Niagwan Procurement Manager Farm Credit Canada procurement@fcc.ca RFP SCOPE FCC is releasing this Request for Proposals (RFP) with the intention of contracting multiple forensic service partners capable of assisting FCC in conducting forensic investigations. Business scenarios include, but are not limited to: Malware infection External attack Misuse/abuse of resources/assets Fraud Service(s) disruption Theft (info or equipment) Conflict of interest Disclosure/destruction of information Sudden departure/termination FCC has implemented security services that mitigate risk within FCC. The forensics service helps ensure that FCC can prevent, detect and respond effectively to security incidents, minimizing the impact of these incidents on FCC’s business operations and reputation. FCC’s current IT environment: IAAS/PAAS - cloud infrastructure services (Azure and AWS) PAAS/SAAS - applications for productivity and collaboration (Microsoft, Office 365) SAAS - applications for a limited number of FCC’s business critical systems FCC has a Managed Security Services Provider (MSSP) There is recognition that a multi-partner forensics resourcing model better supports the current/future IT environment, nature of cyber security incidents, types of investigations, and digital forensic requirements. NOTE: Mandatory Requirements Resources who may be assigned to FCC must be certified in at least one of the following, or equivalent: Computer Hacking Forensic Investigator [EC-Council], GIAC Certified Forensic Examiner (GCFE) [SANS], GIAC Certified Forensic Analyst (GCFA) [SANS], EnCase Certified Examiner [EnCase] and must have an elevated level of security (e.g. Government of Canada’s “Secret”). RFP PARTICULARS All conditions for Proponent participation are included in the RFP documents. Duration of Contract: Up to five (5) years. Options: Not applicable. Estimated Quantity of Goods or Services: Not applicable. Timeframe of Delivery of Goods or Services: Not applicable. RFP SCHEDULE RFP Release Date: July 26, 2023 Proponent Questions Accepted Until: August 2, 2023 at 2:00PM* FCC Response to Proponent Questions Delivered Before: August 11, 2023 at 5:00PM* RFP Closing Date/Time: August 16, 2023 at 2:00PM* NOTE: All times are CST – Saskatchewan. The above dates are subject to change at the sole discretion of FCC. Any changes to the RFP Schedule will be communicated to all Proponents via amendment on MERX. RFP PROCESS CONSIDERATIONS This opportunity is covered under the provisions of Chapter 5 (Government Procurement) of the Canadian Free Trade Agreement (CFTA) and Chapter 19 (Government Procurement) of the Canada-European Union Comprehensive Economic and Trade Agreement (CETA). FCC is subject to the Official Languages Act (Canada). Proponents may choose to respond to this RFP in their official language of choice (English or French). This opportunity notice references a non-binding, competitive RFP, and is not a call for tenders. FCC is not obligated to proceed with the Work described in the RFP Scope, and may cancel the RFP at any time. FCC’s procurement process allows for consecutive or concurrent negotiations between FCC and one (1) or multiple Proponents, prior to awarding a Contract. MERX ELECTRONIC BIDDING SYSTEM This Request for Proposals (RFP), including any attachments and amendments to such RFP, is available for download by the Proponent on MERX. MERX is a Canadian Public Tenders electronic bidding system accessible at https://www.merx.com. It is the sole responsibility of the Proponent to ensure its compatibility with MERX. Proponent proposals MUST be submitted electronically through MERX, preferably in a PDF or MS Word file, prior to the RFP Closing Date/Time specified in the RFP. Proposals submitted in other formats, by other methods or through any other means, or after the RFP Closing Date/Time specified in the RFP, may be rejected by FCC. PRIORITY OF DOCUMENTS In the event there are any discrepancies between this opportunity notice and the information on the MERX website proper, this opportunity notice shall take precedence. Bidding and Documents are available on http://www.merx.com. Fees may apply; See https://www.merx.com/public/pricing for more information.