National Cybercrime Solution Project

Trade Agreement: CETA/WTO-AGP/CPTPP/CFTA/FTAs with Peru/Colombia/Panama/Korea/UK
Tendering Procedures: All interested suppliers may submit a bid
Competitive Procurement Strategy: Best Overall  Proposal
Comprehensive Land Claim Agreement: No
Nature of Requirements: 

National Cybercrime Solution Project

M7594-205915/D

NATIONAL CYBERCRIME SOLUTION FOR CANADA ROYAL CANADIAN MOUNTED POLICE

This is the final bid solicitation package being made available to all interested bidders. Interested bidders are to submit their bids in accordance with the bid solicitation document. 


1.0  Overview

The Royal Canadian Mounted Police (RCMP) is seeking a National Cybercrime Solution (NCS), hereafter referred to as "the Solution". The Solution must enable the National Cybercrime Coordination Unit (NC3) to deliver on its mandate, to: 
-Coordinate Canadian cybercrime operations and collaborate with international partners;
-Provide digital investigative advice and guidance to Canadian police;
-Produce actionable cybercrime intelligence for Canadian police; and
-Establish a national public reporting mechanism for reporting cybercrimes and frauds to police.

The primary users of the Solution will include employees of Canadian Police Services, Government of Canada employees and Canadian citizens and businesses via the Public reporting mechanism.

The Government of Canada (GC) wants to provide the law enforcement community access to timely, adequate and integrated information for accurate decision-making. The Solution must support business processes and workflows, information exchange and information workflows, as well as categorization and assessment of information by business rules and analytics. In addition, the NC3 requires access to a secure centralized data store of structured, semi-structured and unstructured data for storage and retrieval of digital information of various types and varying sizes, including related metadata. The Solution must allow for the growth of data without any degradation of performance.

The desired Solution must support the business capabilities and business requirements. Ssee below for more information.

2.0  Capabilities and Business Requirements
Canada seeks a number of capabilities and business requirements to be addressed by the Proposed Solution, including, but not limited to:

2.1  Send and Receive Cybercrime Submissions 
NC3 will receive and send requests to support cybercrime investigation and intelligence efforts via the new Police and Partner Portal (P3) and other traditional means (e.g. email).   Partners include domestic, international law enforcement and federal agencies.   Information may contain large sets of structured, semi-structured and unstructured data. The Solution must provide case management capabilities to receive, capture, analyze, enrich, correlate, assess and de-conflict information, and integrate within the Solution’s ecosystem to further existing investigations or launch new ones.

2.2  Public Reporting Website
The public and businesses will report a wide spectrum of cybercrime and fraud incidents via the Public Reporting Website. The Public Reporting Website is being developed by the RCMP in collaboration with the Canadian Digital Service. The Solution must be compatible with the Public Reporting Website in order to ingest Complaint Files for triage, assessment by the NC3 and for access by Police Services of Jurisdiction.

2.3  Cyber Intelligence 
The Solution must provide users with the capability to analyze data in order to generate intelligence and support decision making about, and from, that information. The solution must enable the visualization of data and data points that can be used to support conclusions and inferences. The solution must use a range of automated tools (i.e. Artificial Intelligence (AI), Machine Learning (ML)) and advanced data mining features to support NC3 users with the analysis of unstructured, semi-structured and structured data. 

2.4  Operational Coordination 
The Solution must provide the capabilities to coordinate the efforts of law enforcement and other partners as these organizations respond to cybercrime events in Canada.  This includes coordination with and de-confliction between partners by leveraging knowledge gained through its analytical processes and maximizing all the capabilities of the Solution.

2.5  Technical Advice and Guidance 
The Solution must provide APIs to allow the integration with new and existing tools and to provide a platform to facilitate the sharing of advice, guidance and tools with cybercrime partners. Advice and Guidance will be provided directly to partners and also through a secure on-line knowledge base.  

2.6  Client Relationship Management 
The Solution must provide capabilities for the NC3 to actively log, track, monitor and report on engagements and partnerships including interacting with Partners via online mechanisms.

2.7  Malware Cross-Reference 
The Solution must facilitate identifying malware samples from Canadian law enforcement against selected domestic or international malware libraries to support intelligence and investigation efforts.

Canada is seeking a Protected B, Medium Integrity, Medium Availability (PBMM) cloud-based solution.  

The Solution may be comprised of any combination of commercial-off-the-shelf (COTS) software or pre-existing software; the resulting configuration of such software must allow operation of the Solution at all times, in accordance with the Statement of Work in the bid solicitation.


The Contractor’s proposed Solution must be configured to, but not limited to the following: 
1.Include hosting services that meet Government of Canada data residency requirements;
2.Meet Government of Canada security requirements and industry best practices;
3.Include secure maintenance and technical support;
4.Include training and other professional services, as and when requested; 
5.Include regularly updated solution-based training materials and documentation, including all requisite software licenses and warranties; and
6.Allow the Government of Canada to retain ownership of all data in the Solution including business data, monitoring data, and metadata.

3.0  Procurement Strategy
This openly competitive procurement process and resulting Contracts will follow an agile procurement approach in order to encourage more effective collaboration with vendors. Being agile means approaching the project in stages while assessing and addressing challenges along the way. 

The competitive agile procurement process will result in the award of up to three (3) Contracts at a predefined value over a set duration for the 3 top-ranked Bidders to develop independently a Capability and Usability Assessment (CUA) Prototype Solution. Canada will require the Prototype Solutions to be deployed in a Cloud tenancy belonging to the Bidder. 
Following the delivery of the Contractors CUA Prototype Solutions, Canada will conduct an assessment of the proposed prototype Solutions. Additionally, Canada will, at its sole discretion, test the proposed solution by the top-ranked Contractor (identified after the CUA assessment) through the Prototype on Platform (PoP) test to confirm both that its solution will function as describe within the RCMP’s ecosystem and that it meets the stated technical functionality requirements.

At Canada’s sole discretion, the option for a Contractor to deliver the production ready Solution, will be exercised in accordance with the Statement of Work and the evaluated Bid price of the Contract.  
Canada requires that any proposed Infrastructure as a Service (IaaS) or Platform as a Service (PaaS) components associated with the Bidder’s proposed Solution must be developed, tested, and deployed within the RCMP’s Cloud tenancy. Additionally, any Software as a Service (SaaS) components requiring integration as part of the Solution must be developed, tested and integrated with RCMP's Cloud tenancy.

This agile procurement strategy is intended to provide Canada, at its sole discretion, the rights to exercise its irrevocable option to contract with any Contractors who participated in the CUA to implement a portion of the Work if it is determined that this would best meet the needs of Canada. 

The decision to award up to 3 Contracts to the top-ranked Bidders for the prototype contracts and ultimate selection of one or more Contractor(s) to develop and deliver the full Solution will be based on the combined highest score of technical, financial and CUA assessments. 

The resulting agile Contracts will include irrevocable options allowing Canada to extend the term of the Contract to mitigate performance-related risks.  While Canada intends to issue a Contract(s) of a specific duration, Canada will reserve the right to continue to Contract for and leverage this Solution for as long as it makes business sense for Canada to do so. 

This agile procurement includes provisions that allows for the contracted Solution(s) to evolve with time and technology, including incorporation of functionality or technology that isn’t currently part of the requirement.  

The resulting contract will grant Canada the right to consider these evolutionary functionality or technology to be part of the ongoing scope of the work being done under the Contract, subject to Canada’s internal approval processes. 

Additionally, the resulting Contract will include provisions to grant Canada the sole reserve to, at a subsequent date and at its sole discretion, identify the solution either as a multi-departmental solution, or designate the solution as a Government of Canada Enterprise-wide standard if and when determined by the GC-Enterprise Architecture Review Board (GCEARB).

Delivery Date: Above-mentioned

The Crown retains the right to negotiate with suppliers on any procurement.

Documents may be submitted in either official language of Canada.