Technology and Innovation - Negotiated Request for Proposal - Cyber Threat Intelligence Platform

The Government of Alberta’s Cybersecurity Division (CSD) has historically relied on a Managed Security Services Provider (MSSP) to support its cybersecurity operations, including the provision of cyber threat intelligence (CTI). Over time, the CSD recognized the strategic importance of developing internal CTI capabilities and subsequently established a dedicated Cyber Threat Intelligence team. This team has been instrumental in delivering actionable intelligence to both the CSD and to CyberAlberta—a public-facing initiative that provides cybersecurity advice and guidance to a broad Community of Interest (COI) across the province. As both the CSD and the GoA CTI team have matured, their operational capabilities have significantly increased. This evolution has reduced the dependency on external MSSP services, particularly those related to threat intelligence. The GoA CTI team now posses the expertise and capacity to manage and produce high-value intelligence internally, rendering MSSP-provided CTI services less impactful. To further enhance the GoA CTI team’s effectiveness and autonomy, the Province is seeking to procure a Threat Intelligence Platform (TIP), enabling direct access to threat data and collaborative intelligence workflows, obviating the need for an MSSP. The TIP will support the delivery of enriched, timely, and actionable intelligence to both internal stakeholders within the CSD and external partners within the CyberAlberta COI. This initiative marks a strategic shift toward a more self-sufficient and agile CTI capability within the CSD. Proponents should be aware that this procurement forms part of a broader transformation of cybersecurity services within the GoA. The TIP must be capable of evolving alongside other modernization initiatives, including future integration with automation, orchestration, and information-sharing platforms.