HM_NRFP_2019-20-0011 - CYBERSECURITY AUDIT SERVICES

This Negotiated Request for Proposals (the “NRFP”) is an invitation by l’Hôpital Montfort (“HM”) to prospective proponents to submit proposals for Cybersecurity audit services, as further described in Section A of the NRFP Particulars (Appendix D) (the “Deliverables”).

Hôpital Montfort is soliciting proposals from qualified firms with a core competence in auditing practices to conduct a Cybersecurity posture audit that measures policy and process alignment with industry standards such as ISO/IEC 27001 or the NIST Cybersecurity Framework.

The purpose of this assignment is to review Montfort's security program and controls to ascertain their posture and readiness to address relevant threat and risks that the Ontario's acute healthcare environment faces.

Specifically, the audit shall examine the operation of Montfort implementation and management of cybersecurity controls associated with governance, policies, procedures, practices, information systems, training, and third parties related to the operation of the organization information technology.