Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia... Tender

Procurement Summary

Country : Gambia

Summary : Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA)

Deadline : 23 Apr 2021

Other Information

Notice Type : Tender

TOT Ref.No.: 51746067

Document Ref. No. :

Financier : African Development Bank (AfDB)

Purchaser Ownership : -

Tender Value : Refer Document

Purchaser's Detail

Name :Login to see tender_details

Address : Login to see tender_details

Email : Login to see tender_details

Login to see details

Tender Details

Expression of Interest are invited for Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA).

Institutional Support for Economic and Financial Governance III Project Projects
Coordination Unit
Ministry of Finance and Economic Affairs
The Quadrangle, Banjul, The Gambia


REQUEST FOR ExPRESSIONS OF INTEREST

RECRUITMENT OF A CONSULTING FIRM TO CONDUCT NETWORK SECURITY AUDIT FOR THE GAMBIA REVENUE AUTHORITY (GRA)

Country: THE GAMBIA

Project: Institutional Support for Economic and Financial Governance III Project

Sector :Economic and Financial Governance Sector

Financing Agreement reference: 2100155030566

Project ID No.: P-GM-K00-011

The Government of the Gambia has received financing from the African Development Bank toward the cost of the Institutional Support for Economic and Financial Governance III Project and intends to apply part of the agreed amount for this grant to payments under the contract for Recruitment of a Consulting Firm to conduct network security audit for GRA.

The services included under this project are:

Scope of services of this project

The audit will focus on the network security perimeter and the GRA ISP-s security layer, including associated policies, standards and procedures as well as the effectiveness of the security implementation.

Key Activities

1. Review the mechanisms of access to verify whether it conforms to policy and industrial standard and advice

2. Review the network architecture and topology and suggest required changes if necessary.

This review should recommend changes of network equipment based on the use of any future customs IT system in cases where scanned documents will be used

3. Review and recommend an acceptable infrastructure for a centralized Single Window system

4. Make analysis of network traffic and advise baseline for network traffic

5. Penetration or intrusion test the systems and assess vulnerability at various security zones including the GRA Service Provider and advice

a. Use different but appropriate threat models, align it to the security policy and assess the baseline security mechanisms

b. Lock overall system test, from intrusion to detection, alarm, delay and response

c. The same focus should be giving to the both the outermost (ISP) and inner security perimeters


6. Review internal vulnerabilities including but not limited to attacks base on psychology and
social engineering
7. Review security equipment configurations and policies
8. Physical security of ICT equipment
9. Review the GRA business continuity plan and recommend
10. Review the enterprise anti-virus and anti-spam ware management and recommend Develop
a comprehensive GRA ICT security policy
11. Produce a comprehensive policy and advice note for possible adoption and implementation
by GRA.
12. Formulate standard operating procedures to guide in the implementation of the ICT Security
Police.
The Project Coordination Unit of the Ministry of Finance and Economic Affairs now invites eligible
Consultancy Firms to indicate their interest in providing these services. Interested consultancy firms
must provide information indicating that they are qualified to perform the services (brochures,
description of similar assignments, experience in similar conditions, availability of appropriate skills
among staff, etc.). Consultants may constitute joint-ventures to enhance their chances of qualification.
Eligibility criteria, establishment of the short-list and the selection procedure shall be in accordance
with the African Development Bank-s ““Procurement Policy and Methodology for Bank Funded
Operations, October 2015”, which is available on the Bank-s website at http://www.afdb.org.
Interested consultants may obtain further information at the address below during office hours
Monday to Thursday 8.00 am to 4.00 pm and Friday 8:00am - 12:30pm
Expressions of interest must be delivered to the address below by 23rd April, 2021 at 1100 hrs
Gambian Time and mention “Recruitment of a Consulting Firm to conduct network security audit
for the Gambia Revenue Authority (GRA).
Attn: Mr. Saffie Dambelleh
Project Coordinator
Institutional Support for Economic and Financial Governance (ISEFG) II Project
Project Coordination Unit
Ministry of Finance and Economic Affairs
The MoTIE Building, Banjul, The Gambia
Tel: 220 4223301 / 4223304
E-mail: sdambelleh@yahoo.com ; jengtiju@gmail.com ; seyroheya20@gmail.com

Documents

 Tender Notice