Eastern Africa Regional Digital Integration Project

THE REPUBLIC OF SOUTH SUDAN

MINISTRY OF INFORMATION, COMMUNICATION TECHNOLOGY AND POSTAL SERVICES (MICT&PS)

The Eastern Africa Regional Digital Integration Project (EA-RDIP)

Project ID. P176181; Grant No. E1780

REQUEST FOR EXPRESSIONS OF INTEREST (REOI) FOR CONSULTING SERVICES

FIRM SELECTION

CONSULTANCY SERVICES FOR DEVELOPING NATIONAL CYBER SECURITY STRATEGY

REFERENCE NO: SS-MICT&PS-374584-CS-CQS

• The Government of the Republic of South Sudan has received financing from the World Bank toward the cost of the Eastern Africa Regional Digital Integration Project (EA-RDIP), and intends to apply part of the proceeds for consulting services.
• The consulting services (“the Services”) include: to develop a National Cybersecurity Strategy and related action plan. The strategy should identify cybersecurity objectives and immediate priorities for South Sudan to focus on building its cybersecurity capacity. The accompanying Action Plan must translate these objectives and priorities into a phased, costed approach that is fit-for-purpose for South Sudan.
• The detailed Terms of Reference (ToR) for the assignment found at the following website: www.mictps.gov.ss/eardip-south-sudan.
• The Ministry of Information, Communication Technology and Postal Services (MICT&PS) now invites eligible Consultants to indicate their interest in providing the Services. Interested firms should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The short-listing criteria for the firm are:

1. The firm must demonstrate strong skills and experience in cybersecurity and Information and Communication Technologies (ICT), particularly in the following areas: governance, legislation, risk management, protection of critical information infrastructure, incident response, and cybersecurity skills development, with at least Five (5) years of relevant experience.
2. The firm must demonstrate extensive knowledge of cybersecurity policy, strategy and operations in a government context.
3. The consultant must have an appropriate methodology and experience of applying related research tools.
4. The firm must show proof of having carried out at least two (2) similar assignments preferably in African Countries.
5. Demonstrating an understanding of key frameworks, methodologies, and best practices in cybersecurity, including: Guide for the development of a national cybersecurity strategy, CMM (Capability Maturity Model), NIST CSF (National Institute of Standards and Technology Cybersecurity Framework), ISO 2700x, etc.
6. Prior experience working with the public sector is preferred.
7. Experience in a developing country context is considered an advantage.
8. The firm shall propose a core project team members comprising of at minimum a team leader, four (4) technical experts as detailed in the TOR, and any additional support staff deemed necessary to deliver the assignment.

• The Consultant(s) will be selected in accordance with the World Bank’s Procurement Regulations for IPF Borrowers, dated July 2016 and revised September 2023 (Fifth Edition) which can be found at the following website: www.worldbank.org/procurement.
• The Consultant is expected to complete the assignment in full within 20 weeks, and to submit the listed deliverables in TOR based on the indicative timelines.
• The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” Fifth Edition of September 2023 (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest. 
• A Consultant will be selected in accordance with the Individual Consultant Qualification Selection (CQS) method set out in the Procurement Regulations.
• Further information can be obtained at the address below during office hours [weekdays Monday to Friday 0800hrs to 1700hrs local time excluding public holidays]. Interested Consultants are required to continually and constantly check the MICT&PS website: www.mictps.gov.ss/eardip-south-sudan for the TOR and any additional information or clarification that may arise before the submission date.

Undersecretary – Telecommunication Sector

Eastern Africa Regional Digital Integration Project (EA-RDIP)

Ministry of Information, Communication Technology and Postal Services

Email addresses: procurement.eardip@gmail.com and copy to eardippiu23@gmail.com;

• Expressions of interest must be delivered in a written form to the address above (in person, or by e-mail) by 13th December, 2024 at 1700 Hrs. EA Time.