University of Alberta - Request for Proposal - Security Compliance and Certification Advisory Services

The University of Alberta's Faculty of Engineering operates a Canadian AI computing platform (hereinafter "the Platform") supporting a range of workloads including regulated data. The University requires a qualified supplier to provide security compliance advisory services over a three (3) year engagement, guiding the Platform through a structured compliance maturity program aligned to Canadian federal and industry standards. The Platform is required to achieve compliance readiness across a set of applicable Canadian federal and industry frameworks. Relevant frameworks include but are not limited to: SOC 2 (Type 1 and Type 2), Protected B (Government of Canada), CPCSC Levels (Government of Canada), ISO 27001, NIST CSF, or any other relevant certifications. Proponents will need to demonstrate advisory experience across a minimum of two (2) of these frameworks. The vendor's role is exclusively advisory, to assess gaps, guide remediation, and prepare the University for external audits at each stage. The University will separately engage its own auditors. The engagement covers three (3) progressive compliance tiers, with each year building on the previous. The University of Alberta is inviting the submission of Proposals to advise, guide, and prepare the Platform at the department of Faculty of Engineering to be audit ready for the certifications described above.