Notice of Intended Procurement
Name of Procuring Entity
Toronto Metropolitan University (the “University”)
Contact Person and Contract Person Coordinates
Amanda Wood, 1 Dundas St West, 16th Floor, Toronto, ON, M5B 2H1, 416-979-5000 ext. 556981
Procurement Documents
The procurement documents are available at www.merx.com.
Note that obtaining access to the procurement documents will require prospective suppliers to register and pay a registration fee. Pricing and Payment Terms are available on the MERX website.
Description of Procurement
The University is conducting a Request for Proposals for one (1) cyber security maturity assessment against the ISO 27002:2022 framework, NIST 2.0 CSF Framework and the Capability Maturity Model (CMMI) maturity rating system. The Successful Proponent will also be identified as the University's preferred supplier to perform future cyber security maturity assessments at the University’s sole discretion, for the term of the Final Agreement. The scope of this assessment will be University wide and include several different departments and faculties, as further described in Appendix B.
The University intends to execute a Professional Services Agreement provided in Appendix E.
The procurement is not anticipated to involve negotiation. An electronic auction is not anticipated.
Address and Final Date for Submissions
Submissions must be submitted electronically at ttps://tmu.bonfirehub.ca/opportunities/100912 on or before January 20, 2026, at 11:00:00 am.
The submissions will not be opened publicly.
Conditions for Participation
The procurement is subject to the following conditions for participation:
Mandatory Submission Requirements
File #1 – Proposal Acknowledgement Form Pass/Fail
File #2 – Information Security Requirements Pass/Fail
File #3 – Privacy Requirements Pass/Fail
Minimum Passing Score for Stage 2 - Technical is 36 points out of 60
Minimum Passing Score for Stage 3 - Presentation is 12 points out of 20
The University will base its selection of qualified suppliers on the following criteria:
Criteria Weighting (Points)
Stage 1 - Mandatory Evaluation Criteria:
File #1 – Proposal Acknowledgement Form Pass/Fail
File #2 – Information Security Requirements Pass/Fail
File #3 – Privacy Requirements Pass/Fail
Stage 2 – Technical Evaluation Criteria
File #4 - Company Information 5
File #5 – Relevant Experience 20
File #6 – Proponent Team 15
File #7 – Approach & Schedule 15
File #8 – Social and Sustainable Practices 5
Subtotal 60
Stage 3 – Presentation
Presentation 20
Subtotal 20
Stage 4 – Financial Evaluation Criteria:
Total Price of Initial Assessment – Requested Data 20
TOTAL 100
Applicable Trade Agreements
This procurement is subject to the following trade agreement(s):
Broader Public Sector (BPS)
Canadian Free Trade Agreement (CFTA)
Quebec/Ontario
Contract Details
The term of the Final Agreement is three (3) plus one (1) plus one (1) years.
Notes
Suppliers should note that information contained within this notice is subject to change. Suppliers are encouraged to obtain the procurement documents which contain the most current information. If there is a conflict between the procurement documents and this notice, the procurement documents will take precedence.
