AB-2025-05103 - RFP 25-1574 Data Security Posture Management

The City of Calgary is seeking proposals from qualified vendors to provide a comprehensive Data Security Posture Management (DSPM) solution to enhance visibility, governance, and protection of sensitive data across our hybrid infrastructure, which includes cloud and on-premises environments. The solution must support seamless integration with key technologies such as Microsoft Azure, OneDrive, Exchange (Online and On-Prem), and NetApp MetroCluster.

The purpose of this project is to implement a solution to:

1. Continuously discover, classify, and monitor sensitive data across both cloud and on-premises systems.
2. Proactively identify and mitigate insider risks, such as unauthorized access, privilege misuse, and negligent behaviour.
3. Strengthen the organization’s ability to conduct timely, accurate incident response and investigations tied to data usage.
4. Apply consistent data protection policies across Microsoft Azure, OneDrive, Exchange, and NetApp environments.
5. Enhance visibility into the movement, sharing, and lifecycle of sensitive data to inform investigations.
6. Correlate user behaviour, access levels, and data sensitivity to surface high-risk scenarios for triage and response.
7. Ensure readiness for evolving technologies, including AI-driven workflows and advanced data analytics.
8. Deliver actionable insights and reporting to support security operations, compliance, and executive oversight.