When is the submission deadline?

This RFP closed on March 25, 2026 and is no longer accepting submissions.

What is the budget for this RFP?

Settle estimates the budget at $10,000,000 – $30,000,000. The issuer has not published an official figure.

It was issued by Provincial Health Services Authority. The work is located in Burnaby, British Columbia, Canada.

Who is a good fit for this opportunity?

Established MSSP with experience in managed detection and response. Ability to provide 24/7/365 monitoring and human-led incident response. Expertise in integrating threat intelligence and advanced detection engineering. Experience with public sector and large-scale enterprise cybersecurity. Proven track record supporting multi-cloud and hybrid environments.

Cyber Security Managed Detection and Response Solution (Closed)

SUMMARY

The Province seeks a vendor to deliver a 24/7 managed detection and response (MDR) cybersecurity solution, including monitoring, detection engineering, and incident response for both on-premise and cloud environments.

Settle Signals

RFP Hunter shows what’s open. Settle shows what’s forming.

Deals like this one start months before the RFP. Settle reads the signals first, so your team is talking to Provincial Health Services Authority while competitors are still waiting for the posting.

How an RFP like this forms

Budget approved
Settle flags it
Board minutes and budget documents
Scope and vendors researched
Settle flags it
Planning documents, meeting agendas, contract renewals
RFP posted
You are here
Every bidder can see it now

Learn more about Settle

DESCRIPTION

The Provincial government seeks a vendor to deliver a comprehensive Cyber Security Managed Detection and Response (MDR) Solution as part of an operational Managed Security Service Provider (MSSP) partnership. The solution must offer 24/7 monitoring, detection engineering, triage, and coordinated response services for security events within agency-owned environments. Vendors should support the customization and tuning of detection rules and alert logic while ensuring the agency retains ownership of all detection configurations, playbooks, and rules developed during the contract.

Optional services may include advanced detection engineering, enhanced reporting, user awareness support, vulnerability intelligence integration, and expanded threat intelligence features. The MDR solution must incorporate threat intelligence and provide automated event correlation across multiple telemetry sources. Monitoring should encompass both on-premise and cloud workloads, including Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) deployments. Human-led incident response and remediation coordination with agency and third-party providers is required. The use of confidential agency data, telemetry, or incident artifacts for AI or machine learning model training is expressly prohibited without prior written authorization.

KEY REQUIREMENTS

Operate within BC Health's customer-owned Microsoft Sentinel SIEM environment as the primary platform for event ingestion, correlation, and incident management
Integrate with BC Health's existing endpoint detection and response (EDR) platforms without requiring replacement
Leverage BC Health's existing identity, endpoint, email, and cloud security platforms as primary detection telemetry sources
Integrate with BC Health's identity and access management platform (Entra ID) for identity-based threat detection
Provide automated correlation of events across multiple telemetry sources within the customer-owned environment
Support customization and tuning of detection rules and alert logic within BC Health's platforms
Ensure BC Health retains ownership of all detection rules, alerts, playbooks, and custom configurations created under the contract
Continuously develop and deploy updated detection logic in response to emerging threats
Incorporate threat intelligence into detection operations
Provide 24/7/365 monitoring and human-led response services
Coordinate incident response and remediation activities with BC Health and designated third-party service providers
Provide monitoring coverage for cloud environments, including IaaS and PaaS workloads
Prohibit the use of BC Health confidential data, telemetry, or incident artifacts for AI or machine learning model training without explicit written consent
Meet strict service levels for rapid detection, containment, and reporting
Comply with BC Health privacy standards, FOIPPA, and ISO 27001 or equivalent security frameworks

Do you qualify? Get a free fit score and answer these once for every RFP that asks.

TIMELINE

NDA and Supplier Information Form Submission Deadline: March 25th, 2026

Tentative RFP Release Date: March 30th, 2026 (to invited proponents only)

Issuing Agency

Provincial Health Services Authority

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Cyber Security Managed Detection and Response Solution