DAG 2015 – Joint and Other Systems Services

ARCHIVED - Secure Configuration Management

WarningThe Defence Capabilities Blueprint replaces this content.

This page has been archived on the Web

Information identified as archived is provided for reference, research or recordkeeping purposes. It is not subject to the Government of Canada Web Standards and has not been altered or updated since it was archived. Please contact us to request a format other than those available.

New Systems


SCM is a security-focused configuration management concept that implements and maintains the established security requirements of the organization and information systems. Today's DND/CAF faces two enormous challenges: defence against sophisticated cyber-threats and maintaining compliance with government regulations (Policy on Government Security). The SCM capability will help achieve both objectives. The SCM capability will enable the reduction of networks' attack surfaces by delivering an automated capability to proactively and continuously harden the security configurations baseline of operating systems, applications, and network and security devices. At the same time, the SCM capability will enable the automation (monitor/auditing) of the compliance with mandated security baselines.


The Project requires specialized knowledge and expertise to define and implement SCM capability enhancements within the department. Deliverables include the following: Compliance Management-Automated validation and enforcement of compliance to business, procedural and technical policies; System Integrity Assurance-Automated validation that managed hardware and software items have not been modified from a known state; Monitoring and Auditing-Automated logging of system events (with sufficient attribute granularity to support forensic analysis) and secure capture and storage of log files; Management-Automated methods of managing systems, including patch security policy management

Preliminary Estimate

  • $20 million to $49 million

Anticipated Timeline

  • 2016
    • Options Analysis
  • 2017
    • Definition Approval
  • 2019
    • Implementation Approval
    • Request for Proposal Release
  • 2020
    • Contract Award
  • 2022
    • Final Delivery

Point of Contact

Assistant Deputy Minister of Information Management
Phone: 613-995-2017

Submit Your Ideas

The information on this page is provided for advisory purposes only and is current as of the date of publication. The information is, however, subject to change without notice and no commitment regarding its future accuracy or content, or any subsequent implementation of the Project described, is made by DND or the Government of Canada. Any expense incurred by any person or entity in reliance upon the information provided is at the sole risk of that person or entity. It is important to note that these contact details are provided for use by interested industry partners only. Please direct all media enquiries to the department of National Defence's Media Relations Office at 1-866-377-0811

Date modified: