Implementation of National FGS-CERT and implementation plan for Digital Forensics Laboratory Department under NCA

Request for Proposal

Development, Supply, Configuration and Implementation of a National Computer Incident Response Team (CSIRT) for National Communication Authority, Somalia

Purchaser: Ministry of Finance, Federal Government of Somalia

Project: SCALED UP

Contract title: Development, Supply, Configuration and Implementation of a National Computer Incident Response Team (CSIRT) for National Communications Authority Somalia

Country: The Federal Republic of Somalia

Grant No.: P168115

RFP No: SO-MOF-472632-NC-RFP

• The Federal Government of Somalia has received a loan from the World Bank toward the cost of the SCALED-UP and it intends to apply part of the proceeds toward payment under the contract for Development, Supply, Configuration and Implementation of a National Computer Incident Response Team (CSIRT) for National Communications Authority, Somalia. For this contract, the Borrower shall process the payments using the Direct Payment disbursement method, as defined in the World Bank’s Disbursement Guidelines for Investment Project Financing, except for those payments, which the contract provides to be made through letter of credit.

• The Ministry of Finance of Somalia now invites sealed Proposals from eligible Proposers for Development, Supply, Configuration and Implementation of a National Computer Incident Response Team (CSIRT) for National Communications Authority, Somalia

• The procurement process will be conducted through international competitive procurement using Request for Proposals (RFP) as specified in the World Bank’s “Procurement Regulations for IPF Borrowers” July 2016, revised November 2017, August 2018, November 2020 and September 2023 (“Procurement Regulations”), and is open to all eligible Proposers as defined in the Procurement Regulations that meet the following minimum qualification criteria

A. Proposer’s Financial Capability i)The Proposer shall furnish documentary evidence that it meets the following financial requirement: the average Annual Turnover in the last three years 2022, 2023 and 2024) to be not less than USD 500,000 (Five Hundred Thousand United States Dollars).

B. Proposer’s Experience and Technical Capacity

• The Proposer should have successfully completed at least 1 (One) contract for the implementation of a similar Computer Incident Response Team (CSIRT) system in the Public sector.

• At least 10 year’s experience in Cybersecurity specifically incident response, cyber threat intelligence and digital forensic

• At least five years of experience:

• Integrating and customization of CIRT/CSIRT/CERT/SOC Tools.

• in developing policies and procedures related to CIRT/CSIRT/CERT/SOC operations (operational workflows, SOPs, incident management processes, service level management frameworks, among others)

• in setting up cybersecurity threat detection and response solutions, if possible

• in setting up of digital investigation and forensics Lab

• The Proposer must provide at least three (3) Client References for similar successfully completed contracts. Details should include the detailed tasks done, country, year, and Client contact details. Evidence of work done should be supported with Completion Certificates or Reference Letters and value of those contracts.

• Proposer’s Legal Requirements

The Proposer shall be legally registered entity in its country of origin.

Interested eligible Proposers may obtain further information from Ministry of Finance, Federal Government of Somalia, [email protected] and inspect the Request for Proposals document during office hours 10:00AM to 1600 hours at the address given below. Document can be obtained from the link Below: https://mof.gov.so/publications/development-supply-configuration-and-implementation-national-computer-incident

A pre-proposal online conference meeting will be held on March 18, 2025. at 2:00PM in the afternoon in Somalia local time.

• A complete set of Proposal documents in English language will be provided upon request. The document including any subsequent amendment or addition will be sent to the Proposer by e-mail. Prior registration is required for submitting clarification questions on the Proposal documents and receiving automatic notice of answers and addenda to the Proposal documents.

• Proposals must be delivered to the address below on or before 11:00 a.m. April 7, 2025.

Electronic procurement will not be permitted Late Proposals will be rejected. The outer Proposal envelopes marked “ORIGINAL PROPOSAL”, and the inner envelopes marked “TECHNICAL PART” will be publicly opened in the presence of the Proposers’ designated representatives and anyone who chooses to attend, at the address below on April 7, 2025. at 11:00. a.m. Somalia local time.

• All Proposals must be accompanied by a “Proposal-Securing Declaration” by using the form included in the proposal document.

• Attention is drawn to the Procurement Regulations requiring the Borrower to disclose information on the successful Proposer’s beneficial ownership, as part of the Contract Award Notice, using the Beneficial Ownership Disclosure Form as included in the Request for Proposal document.

• The address (es) referred to above is (are):