Tenders
Digital Transformation for Africa / Western Africa Regional Digital Integration Program (DTfA/WARDIP SOP1)
REQUEST FOR EXPRESSION OF INTEREST CONSULTANCY FOR THE IDENTIFICATION AND STRENGTHENING OF CYBERSECURITY MANAGEMENT & CRITICAL INFORMATION INFRASTRUCTURE OF THE GAMBIA
Country: The Republic of The Gambia
Project Name: Digital Transformation for Africa/Western Africa Regional Digital
Integration Program
Contract Ref: DTFA/WARDIP/C3.1/2024/QCBS003
Assignment Tittle: Identification and strengthening of cybersecurity management and Critical Information Infrastructure of The Gambia
Number of Candidate: Firm Selection
Reporting to: MoCDE Director of Cyber Security through the Project Coordinator
Office: Central
Duration: Twelve (12) Months
Issue Date 24th June, 2024
Dateline: 12th July, 2024 12:00 Noon
BACKGROUND INFORMATION
BACKGROUND
The Government of The Gambia has secured support from the International Development Association (IDA) (hereinafter ‘the Bank’) for the Digital Transformation for Africa/Western Africa Regional Digital Integration Program (WARDIP) Series of Projects (SOP)-1 in the amount of USD 50 million. The overall aim of the proposed WARDIP-SOP1 is to increase access to and usage of broadband and to strengthen the foundations for digital financial services (DFS) and selected digital public services towards a single digital market in Western Africa. This project will ensure that national digital development objectives are met more effectively and rapidly while also taking regional digital transformation objectives into account. National policies, regulations and implementation of strategic programs would need to be improved further while addressing barriers to cross-border connectivity, data flows and digital services for a seamless and competitive national and regional digital ecosystem to emerge. This would result in a self-perpetuating cycle of economic growth, investment, innovation, job creation and improved service delivery at the national and regional levels. To achieve this objective, the project will consist of three interlinked technical components, in addition to the Project Implementation and Coordination Component, and a Contingent Emergency Response Component (CERC) to address the key binding constraints for the development and attainment of a digital economy.
In view of this, the Government of The Gambia, through the Ministry of Communications and Digital Economy (MoCDE), established a Project Implementation Unit (PIU) as a starting point to kick start the activities entailed in this fund and, as thus, seeks to recruit a consulting firm for the Identification and strengthening of cybersecurity management and Critical Information Infrastructure of The Gambia:
SCOPE OF WORK
The Consultancy is, within twelve (12) months from the start of the exercise, to:
- Establish a holistic and comprehensive cybersecurity management framework tailored to The Gambia’s context, that improves the Cybersecurity Posture of the Country.
- Identify and designate ICT driven sectors and entities that are extremely essential to the socio-economic development as Critical Information Infrastructure (CII),
- Enhance the resilience of critical sectors against cyber threats.
Firm Qualifications and Personnel’s Experience
Firm Qualifications:
The Consulting firms is required to have the following qualifications:
- Must have at least 10 years’ experience in project management and implementation.
- Must have a strong background in Project Management with at least 5 years of managing a similar project.
- Must have experience in conducting similar exercises for a government.
- Must have all necessary documentation as per the WARDIP procurement procedures or requirements.
- Must have local or regional experience to ensure the applicability of proposed solutions.
Key Expert’s Qualifications:
The Personnels of the consulting firm must have the following qualifications and experience:
Personnel (Consultant) |
Experience |
|
Academic |
Professional |
|
| Team Leader (1) |
Must have a master’s degree in Cybersecurity/Information Security/Cybercrime/Cyber law/ Risk Analysis/IT Audit/Management or related subject. |
Must have at least 6 years of professional experience in the related areas (CIIPs, CIP, CNI, Auditing), of which at least 5 years working experience in conducting a similar exercise in Critical Information Infrastructure Mapping. |
| Cybersecurity (2) | Must have a master’s degree in Cybersecurity/ Information Security/ Cybercrime/ Cyber law or related fields of study. | Must have at least 6 years of professional experience in the related areas (CIIPs, CIP, CNI,), of which at least 5 years working experience in conducting a similar exercise in Critical Information Infrastructure Mapping |
| Auditor (1) | Must have a master’s degree in IT Audit or related field of study | Must have at least 6 years of professional experience in IT Audit field and of which at least 5 years’ experience in conducting Audit exercise in area of CII. |
| Risk Management (1) | Must have a master’s degree in risk management/ risk analysis/ or related fields of study. | Must have at least 6 years proven track-record on risk management in a professional assignment specific to ICTs. Cybersecurity Risk Management would be an added advantage. |
| Legal (1) | Must have a master’s degree in law/Cybercrime/ Cyber law/ or related fields. | Must have at least 6 years’ experience in drafting policies and legislation, in the Cybersecurity or related domain. |
The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” (July 1st, 2016, revised in November 2017, Augus 2018 and September 2023) (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest.
A Consultant will be selected in accordance with the Firm Selection using QCBS method set out in the Procurement Regulations.
Further information and the full TOR can be obtained from the email addresses below during office hours from 08:00 to 16:00 GMT Mondays to Thursdays and from 0800 to 12:30 GMT on Fridays.
Expressions of interest together with relevant documents must be delivered in a written form or via email addresses below not later than 12:00 Noon Friday 12th July 2024. Submissions should be in hard or softcopy marked as “Identification and strengthening of cybersecurity management and Critical Information Infrastructure of The Gambia”.
Project Coordinator,
Digital Transformation for Africa/ Western African Regional Digital Integration Program (DTfA/WARDIP)
C/o Ministry of Communication and Digital Economy
Bakau
The Gambia, West Africa
Phone: (+220) 3600170/7972577 (Whatsapp)
Email To: slowe@wardip.gm and Cc: adanso@wardip.gm / abdouliedanso64@gmail.com
Note: Only Shortlisted candidates will be consulted
Digital Transformation for Africa / Western Africa Regional Digital Integration Program (DTfA/WARDIP SOP1)
REQUEST FOR EXPRESSION OF INTEREST CONSULTANCY FOR THE DATA PROTECTION AND PRIVACY INSTITUTIONAL FRAMEWORK, GOVERNANCE AND BUDGET ESTIMATE FOR THE FUNCTIONING OF THE OVERSIGHT AUTHORITY.
Country: The Republic of The Gambia
Project Name: Digital Transformation for Africa/Western Africa Regional Digital Integration Program
Contract Ref: WARDIP/C3.8/2024/ IC-IND008
Assignment Title: Consultancy for the formulation of Data Protection and Privacy Institutional framework, Governance and Budget Estimate for the functioning of the oversight Authority.
Number of Candidates: Individual Consultant
Reporting to: Permanent Secretary of Ministry of Information through the Project
Coordinator
Office: Central
Duration: Two (2) Months
Issue Date 24th June, 2024
Dateline: 12th July, 2024 12:00 Noon
BACKGROUND INFORMATION
BACKGROUND
The Government of The Gambia has secured support from the International Development Association (IDA) (hereinafter ‘the Bank’) for the Digital Transformation for Africa/Western Africa Regional Digital Integration Program (WARDIP) Series of Projects (SOP)-1 of USD 50 million. The overall aim of the proposed WARDIP-SOP1 is to increase access to and usage of broadband and to strengthen the foundations for digital financial services (DFS) and selected digital public services towards a single digital market in Western Africa. This project will ensure that national digital development objectives are met more effectively and rapidly while also taking regional digital transformation objectives into account. National policies, regulations and implementation of strategic programs would need to be improved further while addressing barriers to cross-border connectivity, data flows and digital services for a seamless and competitive national and regional digital ecosystem to emerge. This would result in a self-perpetuating cycle of economic growth, investment, innovation, job creation and improved service delivery at the national and regional levels. To achieve this objective, the project will consist of three interlinked technical components, in addition to the Project Implementation and Coordination Component, and a Contingent Emergency Response Component (CERC) to address the key binding constraints for the development and attainment of a digital economy.
In view of this, the Government of The Gambia, through the Ministry of Communications and Digital Economy (MoCDE), established a Project Implementation Unit (PIU) as a starting point to kick start the activities entailed in this fund and, as thus, seeks to recruit an individual consultant for the formulation of Data Protection and Privacy Institutional framework, Governance and Budget Estimate for the functioning of the oversight Authority;
SCOPE OF WORK
The Consultancy is, within two (2) months from the start of the exercise, to:
- Conduct a series of transparent key stakeholder consultative meetings to establish the scope of the assignment and integrate the legitimate expectations of constituent institutions.
- Submission of an Inception Report covering the key parameters including, assumptions about the timelines, quality aspects and resource allocation requirements as well as evidence of any other new imperatives that must be agreed upon before proceeding onto the next stages.
- Review and reposition the Information Commission and visualize the successful integration of Personal Data Protection and Privacy legislation within its mandate as the implementing authority of the PDPP legislation (upon enactment) and ATI Act 2021.
- Create a responsibility map, organogram and a matrix structure exhibiting critical linkages and potential synergy generation for the aligning and synchronizing the service delivery context of the Ministry.
- Consult and integrate key industry stakeholder perspectives including public and private sector entities and a host of civil Society organizations (CSOs) to ensure the establishment of a contemporary, consultative and contextually apt governance framework that fuses in the legitimate expectations of all stakeholders.
Consultant’s Qualifications:
The Individual consultant is required to have the following qualifications:
- The Consultant must hold at least a bachelor’s degree in economics, Law or any Social Sciences discipline.
- Must have at least 15 years of work experience with 10 years post-qualification experience as a consultant.
- Must exhibit a demonstrable track record in performing similar assignments.
- Prior experience in addressing ICT legal and policy matters, particularly data governance-related, is an added advantage.
- Indicate commitments to review the ATI Act 2021 exhaustively and PDPP Bill 2023 to define and articulate information and data governance functionalities of the unified oversight authority.
- Ability to conduct a review and incorporate broad-based Data Governance Principles outlined in the EU Data Governance Act and other related references to provide integrity and resilience to the structure and functionalities of the unified oversight authority.
- Consideration will be given to those that meet the minimum requirements.
The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” (July 1st, 2016, revised in November 2017, August 2018 and September 2023) (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest.
A Consultant will be selected in accordance with the Individual Selection (IS) method set out in the Procurement Regulations.
Further information and the full TOR can be obtained from the email addresses below during office hours from 08:00 to 16:00 GMT on Mondays to Thursdays and from 0800 to 12:30 GMT on Fridays.
Expressions of interest together with relevant documents must be delivered in a written form and also via email addresses below not later than 12:00 Noon Friday 12 July, 2024. Submissions should be in hard ord softcopy marked as “Consultancy for the formulation of Data Protection and Privacy Institutional framework, Governance and Budget Estimate for the functioning of the oversight Authority”.
Project Coordinator,
Digital Transformation for Africa/Western African Regional Digital Integration Program (DTfA/WARDIP)
C/o MoCDE
Bakau
The Gambia, West Africa
Phone: (+220) 3600170/7972577 (whatsapp)
Email To: slowe@wardip.gm and Cc: adanso@wardip.gm / abdouliedanso64@gmail.com
Note: Only Shortlisted candidates will be consulted
