Comprehensive Phishing and Security Awareness Training Platform

The issuing organization is seeking a vendor to provide a comprehensive phishing simulation and security awareness training platform, along with related services supporting the operational, security, privacy, and training requirements of participating members. The platform should support phishing simulations across multiple attack vectors, security awareness and privacy training, customizable content, automated campaigns, and role- or risk-based training capabilities.

The solution should integrate with common directory, identity, and productivity platforms, including automated user provisioning, user and group management, single sign-on, and other available integration capabilities. It must also provide privacy and data-management practices appropriate for Canadian public-sector organizations, including data residency, retention and destruction, privacy impact assessment support, encryption, vulnerability management, and security incident management.

Required reporting capabilities include tracking training completion, phishing susceptibility, user performance, and overall program effectiveness, with administrative and executive-level reporting. The vendor is also expected to provide ongoing maintenance and technical support, administrator resources and training, and potentially implementation, consulting, custom content, and other professional services. The contract period will be one year. Questions must be submitted by October 13, 2026.