Consultancy Services for ISO 27001 Certification of UECCC ICT Systems

Country : Uganda

Name of Project : Electricity Access Scale- Up Project

Grant No : D9970-UG,

Assignment Title: Consultancy Servies for Implementation and Certification of an Information Security Management System (ISMS) for UECCC - ISO/IEC 27001:2022

STEP Reference No: UG-UECCC-550729-CS-CQS

The Government of Uganda through Uganda Energy Credit Capitalisation Company has received financing from the World Bank towards the cost of the Electricity Access Scale Up Project and intends to apply part of the proceeds for consulting services.

The consulting services (“the Services”) include Consultancy Servies for Implementation and Certification of an Information Security Management System (ISMS) for UECCC - ISO/IEC 27001:2022

The Terms of Reference (TOR) can be found at the following website: www.ueccc.or.ug or can be obtained at the address given below [email protected]

The UECCC now invites eligible consulting firms (“Consultants”) to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The shortlisting criteria are:

• The firm should posses at least 4 years’ experience conducting ISO27001 certification of organizations of a similar nature. For clarity, organizations should be government MDAs with client facing services and lots of integrations along with handling of Private Citizen Data.
• The firm should be NITA-U Level II Certified
• The firm should be certified with the Personal Data Protection Office of Uganda
• The firm should be ISO/IEC 27001 Certified by a reputable certification body.
• The firm should demonstrate proven work experience of at least 4 similar assignments (in ISO 27001 Certification) conducted within Uganda.
• The firm should be accredited by either PECB, APMG, BSI, ISACA or other equivalent bodies for offering training and certification of individuals towards ISO 27001 Lead Implementer Certification. Evidence of this is required.
• Should have evidence of a local office in Uganda (support and implementation) The required qualifications and experience of the Key Experts are detailed in the Terms of reference that can be found at the following website: www.ueccc.or.ug

The shortlist will contain Five (5) to Eight (8) firms.

The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” September 2025 (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest.

Consultants may associate with other firms to enhance their qualifications but should indicate clearly whether the association is in the form of a joint venture and/or a sub-consultancy. In the case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected.

The Consultant will be selected in accordance with the Consultant Qualification Selection (CQS) method set out in the World Bank Procurement Regulations (September 2025).

Further information can be obtained at the address below during office hours from 8.30am to 5.00pm EAT.

Expressions of interest should be delivered in a written form to the address below (in person, or by mail, by 23rd July 2026.

Expressions of Interest (EOI) or any other inquiries shall be addressed to;

The Managing Director,

Uganda Energy Credit Capitalisation Company

Amber House, Plot 29/33 Kampala Road, 3rd Floor, Block E

P.O Box 29725 Kampala

Electronic submissions should be submitted to [email protected]

Managing Director