Recruitment of a consulting firm to provide Technical Assistance for the development of the Critical Information Infrastructure Protection (CIIP) Plan/Guideline and piloting the application of the CIIP Plan to four (4) selected sectors

Date of Issue: 12th June 2024

Country: Republic of Sierra Leone

Name of Project: Sierra Leone Digital Transformation Project

Consulting Services: For The Recruitment of a Consulting Firm to provide Technical Assistance For The Development Of Critical Information Infrastructure Protection Plan/Guidelines And Piloting The Application Of The CIIP Plan To Four (4) Selected Sectors. Ref No: SL-MOFED-428988-CS-QCBS

•

• Introduction

The Government of Sierra Leone (GoSL) has committed to transforming its economy based on a more inclusive and human-centric digital growth and development approach. A high-level vision for the digital economy is articulated in the new National Digital Development Policy (NDDP), which was approved by the Cabinet in December 2021 setting the GoSL’s vision to transform Sierra Leone into an inclusive digital economy and society and to leverage digital technology to support the GoSL to deliver on its national development plan effectively and efficiently. The Sierra Leone Digital Transformation Project (SLDTP) aims to expand access to broadband internet, increase digital skills, and improve government capacity to deliver public services digitally. The project will support the development of a strong enabling environment for the nation’s digital transformation and digital development agenda as articulated in the National Digital Development Strategy.

•

• Objectives

The Sierra Leone Digital Transformation Project (SLDTP) is seeking the services of a qualified firm to develop a robust national cybersecurity risk management framework for the protection of all critical information infrastructure (CII) whose compromise by a cyberattack can have a debilitating impact on national security, provision of essential services, the economy, and public safety. This framework will include i) the identification of sectors to be considered as Critical Infrastructure (CI), ii) the main stakeholders/operators in these sectors, and iii) the digital systems that should be considered CIIs, as well as the development of Critical Information Infrastructure Protection (CIIP) plans at the national and sectoral levels.

More specifically, the purpose of this assignment is to:

• Ascertain the availability, integrity, confidentiality and resilience of the CII systems that underpin the Nation's ability to function and deliver essential services.

• Enhance the security posture of operators to protect against cyber threats that could compromise national security and adversely affect the country's economic conditions.

• Protect sensitive and confidential information critical information infrastructure sectors hold, including personal data, financial records, and classified information.

• Establish measures and procedures to maintain the continuous operation of critical information infrastructure in the face of cyber incidents, ensuring minimal disruption to essential services.

• Leverage international cybersecurity standards and best practices for CIIP, including NIS2 directive in the EU and CISA’s policy initiatives in the US.

• Establish effective incident response mechanisms to detect, analyze, and mitigate cyber incidents promptly, minimizing their impact on critical infrastructure.

• Foster collaboration between government entities and private sector organizations that operate critical infrastructure to increase the protection of CIIs, manage risks and encourage the sharing of information and resources.

The Project Coordination Unit of the Sierra Leone Digital Transformation Project now invites eligible consulting firms (“Consultants”) to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The shortlisting criteria are core business and years in business, relevant experience, and technical and managerial capability of the firm. Key Experts will not be evaluated at the shortlisting stage.

The attention of interested Consultants is drawn to Section III of the World Bank’s Procurement Regulations for IPF Borrowers July 2016 Revised November 2017, August 2018, November 2020, September 2023, and National Public Procurement Act 2016, setting forth the World Bank’s policy on conflict of interest.

Consultants may associate with other firms to enhance their qualifications but should indicate clearly whether the association is in the form of a joint venture and/or a sub-consultancy. In the case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected.

A Consultant will be selected in accordance with the Quality and Cost Base Selection (QCBS) method set out in the Procurement Regulations.

Further information and detailed Terms of Reference can be obtained at the link below: https://moic.gov.sl/sldtp-job-advert/

Expressions of interest must be delivered in written form to the address below by e-mail on or before 27th June 2024 at noon GMT.

Ag.Project Coordination Unit

Sierra Leone Digital Transformation Project

Attn: The Project Coordinator

8th Floor,

Youyi Building

E-mail: [email protected] CC: [email protected]

Please indicate clearly the Name of the Assignment in the email subject heading and attachment as only electronic submissions will be accepted.