Consultancy for the Establishment of a Cybersecurity Operations Centre (Government SOC) and Framework for Government Agencies & Critical National Infrastructure (CNI)

REQUEST FOR EXPRESSION OF INTEREST

Consultancy for the establishment of a Cyber Security Operations Centre (Government CSOC) and Framework for Government Agencies & Critical National Infrastructure (CNI).

Country: The Republic of The Gambia

Project Name: Digital Transformation for Africa / Western Africa Regional Digital Integration Program (DTfA/WARDIP SOP1)

Project ID: P176932

Reference: WARDIP/C3.2.1/2024/CQS002

Assignment Tittle: Consultancy for the establishment of a Cyber Security Operations Centre (Government CSOC) and Framework for Government Agencies & Critical National Infrastructure (CNI).

Duration of the assignment: Twelve (12) months

Deadline of submission: 27th September 2024, 12:00pm (Gambian Time)

Selection Method: Consultant Qualification Selection

Background:

The Government of The Gambia has secured support from the International Development Association (IDA) (hereinafter ‘the Bank’) for the Digital Transformation for Africa - Western Africa Regional Digital Integration Program (WARDIP) Series of Projects (SOP)-1 in the amount of USD 50 million. The overall objective of the DTfA/WARDIP-SOP1 is to increase access and usage of broadband and to strengthen the foundations for Digital Financial Services (DFS) and selected digital public services towards a Single Digital Market in Western Africa. This project will ensure that national digital development objectives are met more effectively and rapidly while also taking regional digital transformation objectives into account. National policies, regulations and implementation of strategic programs would need to be improved further while addressing barriers to cross-border connectivity, data flows and digital services for a seamless and competitive national and regional digital ecosystem to emerge. This would result in a self-perpetuating cycle of economic growth, investment, innovation, job creation and improved service delivery at the national and regional levels. To achieve this objective, the project will consist of three interlinked technical components, in addition to the Project Implementation and Coordination Component, and a Contingent Emergency Response Component (CERC) to address the key binding constraints for the development and attainment of a digital economy.

In view of the above, DTfA/WARDIP, through the Ministry of Communications and Digital Economy (MOCDE), seeks to recruit qualified Consultancy firm to develop a “Project Name: Establishment of a Cybersecurity Operations Centre (Government SOC) and Framework for Government Agencies & Critical National Infrastructure (CNI)” for The Gambia.

Objectives of the assignment:

Establish the Cybersecurity Special Operations Unit (SOC):

• Develop and implement comprehensive processes and an operational framework for the SOC, ensuring alignment with international best practices and standards.

• Strengthen and enhance the SOC's capabilities by incorporating advanced threat detection, incident response, and mitigation strategies to respond effectively to sophisticated cyber threats.

• Enhance Government Network and IT Security:

• Implement measures to improve the security of government networks and IT systems.

• Develop and enforce stringent cybersecurity policies and practices to safeguard critical infrastructure against a broad spectrum of cyber risks

• Formalize National Infrastructure Management:

• Establish a formalized management system for national infrastructure, incorporating comprehensive documentation of processes, roles, responsibilities, and redundancy protocols to ensure operational continuity and resilience for formally managing national infrastructure.

• Coordinate Redundancy Efforts:

• Establish coordination mechanisms to ensure effective communication of redundancy efforts.

• Actively engage relevant stakeholders, including public and private sector entities, in detailed redundancy planning and collaboration initiatives.

• Educate on Redundant Communications Protocols:

• Develop outreach education programs on redundant communications protocols.

• Clearly define and communicate the roles and responsibilities of each organization in emergency response planning, ensuring preparedness and coordinated action during incidents.

• Deploy Communication Channels:

• Implement communication channels across emergency response functions.

• Cover geographic areas of responsibility, involve public and private responders, and maintain command authority.

Expected Outcomes and Deliverables with Timelines:

TIMELINE OF EXPECTED DELIVERABLES:

Deliverables

Time Frame

Cross – cutting Phase

|

|

Deliverables

Time Frame

redundancy of CNIs, MDAs, SOC

|

Validation Workshop of all Phase 3 deliverables

T0 + 8 Months

Phase 4

|