Procurement Summary
Country: Gambia
Summary: Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA)
Deadline: 22 Nov 2019
Posting Date: 28 Oct 2019
Other Information
Notice Type: Tender
TOT Ref.No.: 37468199
Document Ref. No.:
Competition: ICB
Financier: African Development Bank (AfDB)
Purchaser Ownership: -
Tender Value: Refer Document
CPV Classification
48730000 - Security software package
72222300 - Information technology services
Purchaser's Detail
Name: Login to see tender_details
Address: Login to see tender_details
Email: Login to see tender_details
Login to see detailsTender Details
Expression of Interest are invited for Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA).
Project Name: Institutional Support for Economic and Financial Governance (ISEFG) Phase III
Project
Sector: Economic and Financial Governance Sector
Financing Agreement reference: 2100155030566
Project ID No.: P-GM-K00-011
OUTLINE OF SPECIFIC TASKS
The review will focus on the network security perimeter and the GRA ISP’s security layer, including associated policies, standards and procedures as well as the effectiveness of the security implementation. The methodology of the Consultant mission is outline below as follows:
1. Review the mechanisms of access to verify whether it conforms to policy and industrial standard and advice
2. Review the network architecture and topology and suggest required changes if necessary
3. Make analysis of network traffic and advise baseline for network traffic
4. Penetration or intrusion test the systems and assess vulnerability at various security zones including the GRA Service Provider and advice
a. Use different but appropriate threat models, align it to the security policy and assess the baseline security mechanisms
b. Lock overall system test, from intrusion to detection, alarm, delay and response
c. The same focus should be giving to both the outermost (ISP) and inner security
perimeters
5. Review internal vulnerabilities including but not limited to attacks base on psychology and
social engineering
6. Review security equipment configurations and policies
7. Physical security of ICT equipment
8. Review the GRA business continuity plan and recommend
9. Review the enterprise anti-virus and anti-spam ware management and recommend a
comprehensive GRA ICT security policy
10. Produce a comprehensive policy and advice note for possible adoption and implementation
by GRA.
11. Formulate standard operating procedures to guide in the implementation of the ICT Security Policy
The Project Coordination Unit of the Ministry of Finance and Economic Affairs now invites eligible
Consultancy Firms to indicate their interest in providing this service. Interested Consultancy Firms
must provide information indicating that they are qualified to perform the services (description of
similar assignments, experiences in similar conditions and availability of appropriate professional
skills, etc.). The Shortlist criteria will be as follows:
Eligibility criteria, establishment of the short-list and the selection procedure shall be in accordance
with the African Development Bank’s “Rules and Procedures for the use of Consultants” May 2008
Edition, Revised July 2012, on “Selection Based on Consultants Qualification” (CQS) which is
available on the Bank’s website at http://www.afdb.org.
Interested consultants may obtain further information at the address below during office hours
Monday to Thursday 8.00 am to 4.00 pm and Friday 8:00am - 12:30pm.
Expressions of interest must be delivered to the address below not later than Friday 22nd November
2019 at 1100hrs Gambian Time and mention “Recruitment of a Consulting Firm to conduct
network security audit for the Gambia Revenue Authority (GRA).
Attn: Project Coordinator
Institutional Support for Economic and Financial Governance (ISEFG) II Project
Project Coordination Unit
Ministry of Finance and Economic Affairs
The MoTIE Building, Banjul, The Gambia
Tel: 220 4223301 / 4223304
E-mail: [email protected] ; [email protected]
Documents
Tender Notice