Consultancy Services for the Implementation of a BCMS for the Global Fund in Conformity... Tender

Procurement Summary

Country : Switzerland

Summary : Consultancy Services for the Implementation of a BCMS for the Global Fund in Conformity to the ISO-22301 Standard

Deadline : 02 Mar 2020

Other Information

Notice Type : Tender

TOT Ref.No.: 40683043

Document Ref. No. : TGF-20-014

Competition : ICB

Financier : Global Fund to Fight AIDS, Tuberculosis and Malaria (GFFATM)

Purchaser Ownership : -

Tender Value : Refer Document

Purchaser's Detail

Purchaser : THE GLOBAL FUND TO FIGHT AIDS, TUBERCULOSIS AND MALARIA (THE “GLOBAL FUND”)
Global Health Campus Chemin du Pommier 40 1218 Grand-Saconnex Geneva
Switzerland
Email :solicitation@theglobalfund.org
URL :http://www.theglobalfund.org/en/

Tender Details

Request for proposals are invited for Consultancy Services for the Implementation of a BCMS for the Global Fund in Conformity to the ISO-22301 Standard.

REQUEST FOR PROPOSALS (“RFP”)

INVITATION NOTICE

RFP No. TGF-20-014

Consultancy Services for the Implementation of a BCMS for the Global Fund in Conformity to the ISO-22301 Standard

RFP Information Table

Issue Date: 14 February 2020

RFP Closing Date: 2nd March 2020

RFP Closing Time: 17:00 CET

Proposal Submission Address: Following URL for Sourcing Application: https://access.theglobalfund.org/ Global Fund Contact and Contact Information: Solicitation@theglobalfund.org

1. The purpose of this RFP is to select a Contractor which can provide the services described in the Statement of Work included in Attachment A.

2. The Global Fund will evaluate all proposals received in response to this Request for Proposals (RFP) in accordance with the Evaluation Criteria in Attachment B.

3. The requirements and general information regarding the RFP submission are attached hetero as Attachment C.

4. The following annexes must be completed and submitted as part of the proposal;

Annex 1: Service Provider Profile

Annex 2: Consultancy Service Pricing Structure

Annex 3: Vendor Security Compliance Questionnaire

Annex 4: Certificate of Conformance

Annex 5: Conflict of Interest Declaration Form

5. This RFP is in line with, and subject to, the Global Fund-s Procurement Regulations (2017, as amended from time to time), which may be found at http://www.theglobalfund.org/en/business/.

The following are integral parts of this RFP:

a. The Global Fund Solicitation Rules (2017, as amended from time to time), which may be found at: http://www.theglobalfund.org/en/business/;

b. The Policy on Ethics and Conflict of Interest for Global Fund Institutions (2002, as amended from time to time), which may be found at: http://www.theglobalfund.org/en/documents/governance/;

c. The Code of Conduct for Suppliers (2009, as amended from time to time), which may be found at: http://www.theglobalfund.org/en/documents/governance/; and

d. The Sanctions Panel Procedures Relating to the Code of Conduct for Suppliers (2014, as amended from time to time), which may be found at
http://www.theglobalfund.org/en/documents/governance/.

e. The Global Fund Terms and Conditions of Purchase of Goods and Services (2018,
as amended from time to time), which will also be an integral part of any contract resulting
from this solicitation, and which may be found at http://www.theglobalfund.org/en/business/.
f. Submitting a proposal in response to this RFP constitutes an acceptance of the terms indicated
herein and of the terms of each of these documents, including the Global Fund Terms and
Conditions of Purchase of Goods and Services, and the Global Fund reserves the right to reject
the proposal of any entity or individual, as the case may be, that fails or refuses to comply with,
or accept, such terms.
6. This RFP shall not be construed as a contract or a commitment of any kind. This RFP in no way
obligates the Global Fund to award a contract, nor does it commit the Global Fund to pay any costs
or expenses incurred in the preparation or submission of proposals.
7. All communications with regard to this RFP shall be in writing and sent to the Global Fund Contact
Information indicated in the above RFP Information Table.
8. Proposals must be submitted at the Proposal Submission Address, and received by the Global Fund
by the RFP Closing Time and at the RFP Closing Date, all as indicated in the above RFP Information
Table.
* * * * *
THE GLOBAL FUND SOURCING APPLICATION
1. For audit and efficiency purposes, this RFP process is being managed electronically, and
bidders are required to submit their proposals in the following URL for Sourcing
Application: https://access.theglobalfund.org/.
2. Proposals must be submitted in TGF Sourcing Application, and received by the Global Fund
by the RFP Closing Time and at the RFP Closing Date, all as indicated in the above RFP
Information Table.
3. In case, you do not have a Supplier Id in TGF Sourcing Application, please send an email
with sufficient notice to solicitation@theglobalfund.org with the following title in the
subject:
o “TGF-20-011 - Request for login user id creation in TGF Sourcing / iSupplier portal
- Put your organization name”.
4. Unless otherwise indicated, proposals shall be submitted in pdf and should be
divided in two separate folders, one containing your cost proposal and one
containing your technical proposal.
The subject line of your attachment must be labelled as follows:
o TGF-20-011- organization name - technical proposal;
o TGF-20-011 - organization name - cost proposal.
5. All communications with regard to this RFP shall be in writing and sent through the TGF
Sourcing Application platform using the online discussion as indicated in the above RFP
Information Table.
6. Any communication between a Bidder and the Global Fund regarding this RFP, which is
not through the designated channel (https://access.theglobalfund.org/), may invalidate
such Bidder-s proposal to this RFP.
7. The proposal(s) must be valid for 90 days from the deadline for submission.

ATTACHMENT A
STATEMENT OF WORK
Background
The Global Fund to Fight AIDS, Tuberculosis and Malaria (the “Global Fund”) relies on
information and information systems to supports its daily operations and help fulfil its mandate.
Access to relevant, up-to-date information and the ability to share and collaborate across a
geographically dispersed organization is critical to Global Fund. Effective and proactive
information risk management is essential given the ever-changing cyber security threat landscape.
In 2019, The Global Fund secured ISO/IEC 27001:2013 certification for its Treasury cash payments
data and processes, as well as all the related IT operational management processes and facilities of
its offices in Geneva. In 2020, the Secretariat is expanding the scope of its certification to cover its
Office of the Inspector General (OIG) and Ethics Office. In line with this expanded scope, the
Secretariat seeks to implement a business continuity management system in conformity to the ISO23301 Standard. Heading into 2021, the Global Fund intends for its BCMS to cover major business
processes including grant management and program finance. An ISO 22301 Contractor is required
to conduct a business impact analysis, develop recovery strategies, structure business continuity
plans for in-scope business units, and develop and help conduct a test and exercise program ahead
of Stage I and Stage II ISO 22301 audits scheduled for the fourth quarter of 2020, and also to t set
the stage for an expanded ISO 22301 scope in 2021.
This engagement will be carried out on behalf of Global Fund and will report exclusively to BCMS
Manager.
The Contractor is expected to possess experience working with similar organizations and in-depth
knowledge of the ISO 22301 standard to enable the Global Fund to maintain and strengthen its
BCMS to receive certification by a lead auditor. In addition, the implementation of a BCMS must
effectively address business continuity requirements specific to the Global Fund, namely coverage
of key business processes and custodians as defined in the organization-s performance and
accountability framework.
Scope/
Objective
The initial scope of the Global Fund-s BCMS for 2020 covers Treasury cash
payments data and processes, audit and investigation processes of the Office
of the Inspector General (OIG) and integrity due diligence and case
management processes of the Ethics Office, as well as all the related IT
operational management processes and facilities of its offices in Geneva. This
scope will be expanded in 2021 to cover key business units and processes
represented in the following diagram, including management of grant
investments, and finance, procurement and administration:
Page 4 of 23
Activities
The Contractor shall support, document and assist the Global Fund to establish a BCMS in
conformity to the ISO 22301 standard. The Contractor shall also prepare the Global Fund for
obtaining and maintaining ISO 22301 certification for its defined scope. The Contractor shall also
assist the Global Fund in strengthening its BCMS to cover the organization-s key business processes
in 2020 and 2021.
Page 5 of 23
Specifically, the Contractor will work with the Global Fund-s BCMS Manager to:
1. Guide the Definition and Publication of a Business Continuity Policy, Establishing
Associated Governance and Documentation and Identifying Required Training
The Contractor will assist the BCMS Manager in defining and publishing a business continuity
policy for approval by the Management Executive Committee and communicating it to relevant
parties. The Contractor will ensure appropriate governance and documentation of business
continuity in conformity with the ISO 22301 standard. The Contractor shall identify needed
competencies and required training requirements.
2. Facilitate Development of a Business Impact Analysis (BIA) and Risk Assessment
The Contractor shall identify prioritized activities that support the provision of products and
services, assess the impacts of not performing these activities over time and identify dependencies
and supporting resources for these activities, including suppliers, outsource partners and other
relevant interested parties. The Contractor will document the Recovery Time Objectives (RTOs)
and Recovery Point Objectives (RPOs) for business continuity of each critical activity and conduct
an associated risk assessment in accordance with the ISO-31000 standard.
3. Facilitate Development of a Business Continuity Strategy
The Contractor shall work with the BCMS Manager to determine an appropriate business
continuity strategy and eval

Documents

 Tender Notice