Recruitment of a Consulting Firm to Conduct Tender - 51746067

Procurement Summary

Country: Gambia

Summary: Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA)

Deadline: 23 Apr 2021

Posting Date: 30 Mar 2021

Other Information

Notice Type: Tender

TOT Ref.No.: 51746067

Document Ref. No.:

Competition: ICB

Financier: African Development Bank (AfDB)

Purchaser Ownership: -

Tender Value: Refer Document

Purchaser's Detail

Name: Login to see tender_details

Address: Login to see tender_details

Email: Login to see tender_details

Login to see details

Tender Details

Expression of Interest are invited for Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA).
Institutional Support for Economic and Financial Governance III Project Projects

Coordination Unit

Ministry of Finance and Economic Affairs

The Quadrangle, Banjul, The Gambia
REQUEST FOR EXPRESSIONS OF INTEREST
RECRUITMENT OF A CONSULTING FIRM TO CONDUCT NETWORK SECURITY AUDIT FOR THE GAMBIA REVENUE AUTHORITY (GRA)
Country: THE GAMBIA
Project: Institutional Support for Economic and Financial Governance III Project
Sector :Economic and Financial Governance Sector
Financing Agreement reference: 2100155030566
Project ID No.: P-GM-K00-011
The Government of the Gambia has received financing from the African Development Bank toward the cost of the Institutional Support for Economic and Financial Governance III Project and intends to apply part of the agreed amount for this grant to payments under the contract for Recruitment of a Consulting Firm to conduct network security audit for GRA.
The services included under this project are:
Scope of services of this project
The audit will focus on the network security perimeter and the GRA ISP-s security layer, including associated policies, standards and procedures as well as the effectiveness of the security implementation.
Key Activities
1. Review the mechanisms of access to verify whether it conforms to policy and industrial standard and advice
2. Review the network architecture and topology and suggest required changes if necessary.
This review should recommend changes of network equipment based on the use of any future customs IT system in cases where scanned documents will be used
3. Review and recommend an acceptable infrastructure for a centralized Single Window system
4. Make analysis of network traffic and advise baseline for network traffic
5. Penetration or intrusion test the systems and assess vulnerability at various security zones including the GRA Service Provider and advice
a. Use different but appropriate threat models, align it to the security policy and assess the baseline security mechanisms
b. Lock overall system test, from intrusion to detection, alarm, delay and response
c. The same focus should be giving to the both the outermost (ISP) and inner security perimeters
6. Review internal vulnerabilities including but not limited to attacks base on psychology and

social engineering

7. Review security equipment configurations and policies

8. Physical security of ICT equipment

9. Review the GRA business continuity plan and recommend

10. Review the enterprise anti-virus and anti-spam ware management and recommend Develop

a comprehensive GRA ICT security policy

11. Produce a comprehensive policy and advice note for possible adoption and implementation

by GRA.

12. Formulate standard operating procedures to guide in the implementation of the ICT Security

Police.

The Project Coordination Unit of the Ministry of Finance and Economic Affairs now invites eligible

Consultancy Firms to indicate their interest in providing these services. Interested consultancy firms

must provide information indicating that they are qualified to perform the services (brochures,

description of similar assignments, experience in similar conditions, availability of appropriate skills

among staff, etc.). Consultants may constitute joint-ventures to enhance their chances of qualification.

Eligibility criteria, establishment of the short-list and the selection procedure shall be in accordance

with the African Development Bank-s ““Procurement Policy and Methodology for Bank Funded

Operations, October 2015”, which is available on the Bank-s website at http://www.afdb.org.

Interested consultants may obtain further information at the address below during office hours

Monday to Thursday 8.00 am to 4.00 pm and Friday 8:00am - 12:30pm

Expressions of interest must be delivered to the address below by 23rd April, 2021 at 1100 hrs

Gambian Time and mention “Recruitment of a Consulting Firm to conduct network security audit

for the Gambia Revenue Authority (GRA).

Attn: Mr. Saffie Dambelleh

Project Coordinator

Institutional Support for Economic and Financial Governance (ISEFG) II Project

Project Coordination Unit

Ministry of Finance and Economic Affairs

The MoTIE Building, Banjul, The Gambia

Tel: 220 4223301 / 4223304

E-mail: [email protected] ; [email protected] ; [email protected]

Documents

 Tender Notice