Bhutan: Defining Institutional Roles for Cybersecurity and National Cybersecurity... Tender

Procurement Summary

Country : Bhutan

Summary : Bhutan: Defining Institutional Roles for Cybersecurity and National Cybersecurity Risk Assessment

Deadline : 13 Nov 2024

Other Information

Notice Type : Tender

TOT Ref.No.: 109531552

Document Ref. No. : 0002012260

Financier : World Bank (WB)

Purchaser Ownership : Public

Tender Value : Refer Document

Purchaser's Detail

Purchaser : WORLD BANK(WB)
BT - Bhutan
Bhutan

Tender Details

I. BackgroundAs part of ongoing advisory engagements, theWorld Bank (WB) has expanded its support to the Royal Government of Bhutan(RGoB) in accelerating inclusive digital transformation. One strategic areaof engagement has been cybersecurity, where the government has expressed keeninterest in the Bank-s assistance in building a solid foundation formitigating the risks associated with Bhutan-s ambitious plans to advancedigital transformation. The WB's primary support vehicle for the RGoB isthe upcoming “Accelerating Transport and Trade Connectivity in Eastern SouthAsia” (ACCESS) lending project, which is under preparation and expects WB-sboard approval in March 2025. The ACCESS project will focus on developingdigital trade systems for Bhutan and include significant cybersecurityinterventions. To inform and streamline the preparation for ACCESS and supportthe RGoB cybersecurity aspirations, the WB, under the Cybersecurity Multi-DonorTrust Fund (Cyber TF), is providing advisory support services to the BhutanComputer Incident Response Team (BtCIRT). The Bhutan Computer Incident Response Team(BtCIRT) was established in 2016 as part of the Department of InformationTechnology and Telecom (DITT) within the Ministry of Information andCommunication (MoIC). Functions of DITT, including BtCIRT, transitioned to thenew Government Technology Agency (GovTech) as part of a Civil Service Reform Billthat became effective in December 2022. In the new GovTech structure, BtCIRT ispart of the Cybersecurity Division, though, in practice, there are no other functionsunder the Cybersecurity Division, and BtCIRT acts, de facto, as the “NationalCybersecurity Agency” in Bhutan. Since the establishment of BtCIRT and the formationof GovTech, the RGoB has made reasonable efforts to strengthen cyber securityand build solid foundations for mitigating the evolving risks. The first phase of advisory support to BtCIRT startedin early 2023 and was concluded in September 2024 with the followingdeliverab...

Documents

 Tender Notice

TORs-Bhutan-Strengthening-Cybersecurity-Foundations-Phase-2.docx