Technology and Innovation - Request for Qualification - Court Technology Services - Cybersecurity Threat Risk Assessment Consulting Services

The Province is seeking a qualified Cybersecurity and Risk Management Consultant to deliver comprehensive cybersecurity threat and risk identification Services. The consulting engagement scope will include Red Team Penetration Testing and completion of a Threat and Risk Assessment (TRA) Report, delivered in two phases. The Threat Risk Assessment (TRA) shall include: 1. Asset Inventory and Valuation; 2. Threat Identification; 3. Vulnerability Assessment; 4. Determine Impact, Likelihood and Risk Tolerance Statements; 5. Risk Analysis and Assessment; 6. Risk Treatment and Mitigation Planning; and 7. Reporting and Communication. The project objectives will be reducing the impacts of security incidents and align to security operations requirements of the Canadian Judicial Council (CJC) Blueprint for the Security of Court Information.