RFP-2020-001483 - Ontario Health Request for Proposals For Cyber Security Operating Model

Ontario Health requires a vendor to provide an advanced provincial Cyber Security Operating Model for governance, defense and response across the Ontario health care sector, covering:
 

1. Policy, table stakes cyber security standards and compliance, oversight, monitoring, threat hunting, alerting and its operations, to allow for a holistic view on cyber security prevention and defense mechanisms and controls across the sector.
2. The implementation of controls at the health care settings level, including operational compliance, mitigation, remediation and restore measures (Playbooks, recovery teams, SLAs, coordinated response actions and communications); the assumption of risk; site responsibility to maintain and operate at the overall cyber security posture level set across the sector.

1. The best fit for purpose operating model for cyber security governance, defense and response across the health care sector
2. The best fit for purpose Ontario Health cyber security governance and defense operating model and its integration with the above (1)
3. The best fit for purpose cyber security health care sector training and awareness program operating model, including content and delivery channels
4. The best fit for purpose cyber security maturity assessment methodology (framework, guidelines and criteria, anchored by the risk profile for the various interconnected health care settings) and its ongoing operating model for the health care sector