SELECTION OF
CONSULTING FIRMS BY THE WORLD BANK GROUP
REQUEST FOR
EXPRESSION OF INTEREST)
Electronic
Submissions through WBGeProcure RFx Now
ASSIGNMENT OVERVIEW
Assignment Title: Consulting services for preparation of a
Cybersecurity Manual for E-Government Procurement (e-GP) in the East Asia and
Pacific Region (EAP)
Assignment Countries: Vietnam and Mongolia
ASSIGNMENT DESCRIPTION
Governments
recognise that electronic government procurement (e-GP) is a key driver of
efficiency in public procurement. The benefits are compounded where e-GP
systems are integrated with other government systems including PFM systems. The
increased use of e-GP systems makes them vulnerable to information security
risks which can cripple their use and compromise their effectiveness and public
confidence. Security concerns in electronic procurement include vulnerabilities
in system architecture, from public access to the procurement database, and in
the software application. Failure to implement adequate information security
(IS) for e-GP systems could result in operational issues, including security
breaches (both detected and undetected), exposure of confidential information,
identity theft, breach of stakeholder trust, and violations of the country's
legal and regulatory requirements. Risks associated with inadequate IS
management, including cybersecurity, need to be clearly identified and
mitigated with appropriate and cost-effective controls to minimize exposures,
enhance credibility, and improve the efficiency of the procurement process
implemented through e-GP. While countries apply measures to mitigate
information security and other cybersecurity risks, they are not certain that
these measures are adequate compared to international standards and good
practices, especially those related to new types of cyberattacks and the
expanding scope of cybersecurity risks.
The World Bank Group is seeking for qualified consulting
firms to develop a comprehensive Cybersecurity Manual for E-Government
Procurement (e-GP) systems tailored specifically to the East Asia and Pacific
(EAP) region, focusing on securing e-procurement processes, protecting
sensitive data, and ensuring the resilience of e-GP platforms.
To achieve the above-named objectives, the Consultant for
this assignment will perform tasks including but not limited to the following:
1.
Review
existing e-GP systems and their security policies and features.
2.
Assessment
of potential risks and vulnerabilities in the systems.
3.
Evaluate
compliance with information security standards and best practices.
4.
Analysis
of cybersecurity threats on the procurement process
5.
Establish
sources of expertise for Public Procurement Agencies
6.
Make recommendations
The assignment will be implemented within eight (8)
months, expected to be completed by August 2025.
FUNDING SOURCE
The World Bank Group intends to finance the
assignment under TF0C4314.
ELIGIBILITY
The Bank’s eligibility policy and procedures will
be applied.
SUBMISSION REQUIREMENTS
The World Bank Group invites eligible firms
to indicate their interest in providing the services. Interested firms must
provide information indicating that they are qualified to perform the assignment,
their relevant technical and managerial capabilities, their core business and
years in business as well as the qualifications of their key staff. Submitted
documents may include but not limited to business registration, brochures,
description of similar assignments, experience in similar conditions, availability
of appropriate skills among staff, etc. Please note that the total size of all
attachments should be less than 5MB. Firms may associate to enhance their
qualifications unless otherwise stated in the solicitation documents. Where a
group of firms associate to submit an EOI, they must indicate which is the lead
firm. If shortlisted, the firm identified in the EOI as the lead firm will be
invited to the request for proposal (RFP) phase.
Expressions of Interest should be submitted,
in English, electronically through WBGeProcure RFx Now
by the submission deadline.
NOTES
Following this invitation for EOI, a
shortlist of qualified firms will be formally invited to submit proposals. Shortlisting
and selection will be subject to the availability of funding.
Only those firms which have been shortlisted
will be invited to participate in the RFP phase. No notification or debrief
will be provided to firms which have not been shortlisted.
If you encounter technical difficulties while
uploading documents, please send an e-mail to the Help Desk at corporateprocurement@worldbank.org prior to the submission deadline.
