Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA)

• Country: Gambia
• Summary: Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA)
• GMT Ref No: 51746067
• Deadline: 23 Apr 2021
• Financier: African Development Bank (AfDB)
• Purchaser Ownership: Government
• Tender Value: Refer Document
• Notice Type: Tender
• Document Ref. No.:
• Purchaser's Detail:
  Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details.

  Login to see details
• Description:
• Expression of Interest are invited for Recruitment of a Consulting Firm to Conduct Network Security Audit for the Gambia Revenue Authority (GRA). Institutional Support for Economic and Financial Governance III Project Projects Coordination Unit Ministry of Finance and Economic Affairs The Quadrangle, Banjul, The Gambia REQUEST FOR EXPRESSIONS OF INTEREST RECRUITMENT OF A CONSULTING FIRM TO CONDUCT NETWORK SECURITY AUDIT FOR THE GAMBIA REVENUE AUTHORITY (GRA) Country: THE GAMBIA Project: Institutional Support for Economic and Financial Governance III Project Sector :Economic and Financial Governance Sector Financing Agreement reference: 2100155030566 Project ID No.: P-GM-K00-011 The Government of the Gambia has received financing from the African Development Bank toward the cost of the Institutional Support for Economic and Financial Governance III Project and intends to apply part of the agreed amount for this grant to payments under the contract for Recruitment of a Consulting Firm to conduct network security audit for GRA. The services included under this project are: Scope of services of this project The audit will focus on the network security perimeter and the GRA ISP-s security layer, including associated policies, standards and procedures as well as the effectiveness of the security implementation. Key Activities 1. Review the mechanisms of access to verify whether it conforms to policy and industrial standard and advice 2. Review the network architecture and topology and suggest required changes if necessary. This review should recommend changes of network equipment based on the use of any future customs IT system in cases where scanned documents will be used 3. Review and recommend an acceptable infrastructure for a centralized Single Window system 4. Make analysis of network traffic and advise baseline for network traffic 5. Penetration or intrusion test the systems and assess vulnerability at various security zones including the GRA Service Provider and advice a. Use different but appropriate threat models, align it to the security policy and assess the baseline security mechanisms b. Lock overall system test, from intrusion to detection, alarm, delay and response c. The same focus should be giving to the both the outermost (ISP) and inner security perimeters 6. Review internal vulnerabilities including but not limited to attacks base on psychology and social engineering 7. Review security equipment configurations and policies 8. Physical security of ICT equipment 9. Review the GRA business continuity plan and recommend 10. Review the enterprise anti-virus and anti-spam ware management and recommend Develop a comprehensive GRA ICT security policy 11. Produce a comprehensive policy and advice note for possible adoption and implementation by GRA. 12. Formulate standard operating procedures to guide in the implementation of the ICT Security Police. The Project Coordination Unit of the Ministry of Finance and Economic Affairs now invites eligible Consultancy Firms to indicate their interest in providing these services. Interested consultancy firms must provide information indicating that they are qualified to perform the services (brochures, description of similar assignments, experience in similar conditions, availability of appropriate skills among staff, etc.). Consultants may constitute joint-ventures to enhance their chances of qualification. Eligibility criteria, establishment of the short-list and the selection procedure shall be in accordance with the African Development Bank-s ““Procurement Policy and Methodology for Bank Funded Operations, October 2015”, which is available on the Bank-s website at http://www.afdb.org. Interested consultants may obtain further information at the address below during office hours Monday to Thursday 8.00 am to 4.00 pm and Friday 8:00am - 12:30pm Expressions of interest must be delivered to the address below by 23rd April, 2021 at 1100 hrs Gambian Time and mention “Recruitment of a Consulting Firm to conduct network security audit for the Gambia Revenue Authority (GRA). Attn: Mr. Saffie Dambelleh Project Coordinator Institutional Support for Economic and Financial Governance (ISEFG) II Project Project Coordination Unit Ministry of Finance and Economic Affairs The MoTIE Building, Banjul, The Gambia Tel: 220 4223301 / 4223304 E-mail: sdambelleh@yahoo.com ; jengtiju@gmail.com ; seyroheya20@gmail.com
• Documents:

 Tender Notice