Study on government needs for a Security Operations Center (SOC), Computer Emergency Response Team (CERT) and national cloud, including a data sharing and infrastructure analysis and DAO

EXPRESSION OF INTEREST WARDIP-C - 010-2023

FOR A FEASIBILITY STUDY ON CIBERSECURITY IN GUINEA-BISSAU.

• Backgraund To support the region’s digital transformation, the World Bank (WB) is financing the preparation of the West African Regional Digital Integration Program (WARDIP) – Guinea-Bissau – for US$60 million for five years. The project is expected to be submitted for approval by the World Bank Executive Board in September 2023; it’s entered the preparations phase since May 2023

The design of the proposed program considers the need for Guinea-Bissau to develop a digital economy, while aligning itself and integrating into a single and harmonized regional digital market. This will be done through a logical chain consisting on building single regional market for connectivity, data and online services,

Having this type of markets rise cybersecurity concerns and the ongoing framing of the new cybercrime law, the government is seeking to conduct a comprehensive feasibility study to explore the establishment and operationalization of key cybersecurity structures, including a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Critical Information Infrastructure (CII) and a national cloud.

The primary objectives of this feasibility study are to:

• Assess the needs and requirements for the establishment and operationalization of a SOC, CERT, CII and a national cloud in Guinea Bissau.
• Develop a National Cybersecurity Crisis Framework, outlining measures and mechanisms for effective crisis management, loss mitigation, and recovery aligned with the ECOWAS and AUC Cybersecurity Directives.
• Formulate a comprehensive National Cybersecurity Strategy & Action Plan aligned with the ECOWAS and AUC Cybersecurity Directives to guide the country's efforts in addressing current and emerging cybersecurity threats.
• Prepare tender documents for the operationalization of the SOC, CERT, CII and national cloud (aligned with ECOWAS and AUC Cybersecurity Directives) including technical specifications, evaluation criteria, and other necessary details.
• qualification requirements
• The consulting firm should have:
• Over 15 years of experience in the cybersecurity sector, with a focus on the African context.
• A proven track record of conducting similar feasibility studies and developing cybersecurity strategies and action plans.
• In-depth knowledge of international cybersecurity standards and best practices.
• A team of experts with diverse backgrounds, including cybersecurity, risk management, policy development, and infrastructure design.
• Experience in working with government institutions and a strong understanding of public procurement processes.

Selection of the sucessful consultant will be made on the basis of the “Quality and Cost method” as described in the World Bank procurement regulations for Investiments Projets Borrowers 2016 Edition and following updates. For more information and obtention of term of reference, you can requeste it directly on the Office of the Emergency and Food Safety Project (PUSA) located: Rua Osvaldo Vieira, house nº 10, or via email: [email protected]. It should be noted that TOR's are available in Portuguese and English, however the procurement language remains Portuguese.

Consultants firm insterested in providing the consultancy services mentionned above should express their interest until 13th of July.

The Coordinator

_________________________________________

Aníbal Baldé