DEADLINE: 11TH NOVEMBER, 2022
NATIONAL IDENTITY MANAGEMENT COMMISSION (NIMC)
REQUEST FOR EXPRESSION OF INTEREST (REOI) FOR DETAILED CYBERSECURITY STUDY ON THE FEASIBILITY DESIGN AND ARCHITECTURE OF ID-CERT AND SOC OR ANY OTHER CYBERSECURITY SYSTEM TO DETERMINE SYSTEM SOFTWARE APPLICATION AND TOOLS FOR ID-CERT AND ID-SOC AT NATIONAL IDENTITY MANAGEMENT COMMISSION (NIMC)
(1.0) BACKGROUND
The Federal Government of Nigeria (FGN) is in the process of harmonizing the existing ID ecosystem to develop a foundational ID system which can be leveraged to improve service delivery. A national strategy for identification, called the Strategic Roadmap for Developing Digital Identification in Nigeria, has highlighted the need for a minimalistic, foundational, and ecosystem-based approach to identification in the country. The Strategic Roadmap was approved by the Federal Executive Council of Nigeria (FEC) in 2018 and is being implemented in the framework of the Nigeria Digital ID4D project, with technical and financial support from the World Bank, French Development Agency (AFD), the European Investment Bank (EIB). The Strategic Roadmap is intended to offer a credible pathway for the FGN to develop identification by leveraging the FGN’s existing institutions, capacities, and systems.
Aligned with this Strategic Roadmap and the FGN’s National Strategic Action Plan for CRVS (2018-2022), the Nigeria Digital ID4D project has been conceptualized with the primary objective to increase the number of persons with a national ID number, issued by a robust and inclusive foundational ID system, that facilitates their access to services.
The Project will be implemented by a Project Implementation Unit (PIU) in the National Identity Management Commission (NIMC) and an Ecosystem Coordination Strategic Unit (ECSU) under the oversight of a Project Ecosystem Steering Committee (PESC).
The President in 2021 signed the Nigeria Cybersecurity Policy and Strategy document in which it is expected that regulatory agencies establish and set up Sectorial Computer Emergency Response Teams (CERT) or Computer Security Incident Response Teams (CSIRT) that will connect to the national CERT and Security Operations Centre (SOC) referred to onwards as ngCERT. The ngCERT coordinates activities of other sectorial CERTs and facilitates cooperation and partnership of all cybersecurity stakeholders in Nigeria, including international and multilateral organizations. Therefore, an ID sectorial CERT with link to the national CERT is to be established with the objective of providing the necessary safeguards, protection, security, and monitoring of critical information infrastructure assets for the sector.
To achieve this, the project Implementation Unit (PIU) in the National Identity Management Commission (NIMC) intends to hire a consulting firm or consortium with proven record to develop a comprehensive Nigeria ID4D cybersecurity framework including a detailed Cybersecurity study on the feasibility, design and architecture of the ID CERT and SOC and any other required cybersecurity systems that will be central to the trust, safety and stability of the digital identity ecosystem. The established ID CERT will empower NIMC to respond to all digital identity cybersecurity alerts by reacting faster to the increased pace, quantity and sophistication of continuously evolving cyber security threats.
(2.0) Objectives of the Consultancy Assignment
The objective of this consultancy is to conduct a study of the National Identity Management System (NIMS) and the ecosystem with a view to leverage observations and proven approaches across of all three computer network defence elements (people, process, and technology) for the implementation of an identity cybersecurity framework including CERT and SOC.
(3.0) Scope of Services
The successful consulting firm is required to perform the following tasks to achieve the overall goal of the assignment.
(1) Develop a best-in-class, comprehensive and holistic cybersecurity framework, and implementation roadmap for the entire Nigeria ID4D ecosystem, based on international best practice cybersecurity standards and frameworks.
(2) Conduct a feasibility study on the implementation of an ID CERT and SOC.
(3) Recommend options of design and architecture of an ID CERT and SOC
(4) Recommend required cybersecurity systems, hardware, and Solutions to implement ID CERT and SOC design
(5) Develop a cybersecurity capacity building roadmap for managing the National Identity Management Systems (NIMS) and the ecosystem.
The Terms of Reference (TOR) for the assignment is downloadable from https://tinyurl.com/CybersecurityStudy
The project Implementation Unit (PIU) at National Identity Management Commission (NIMC) now invites eligible Consulting firms/ Consortium to indicate their interest in providing the services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the services (brochures, description of similar assignments, experience in similar conditions, general qualification and number of key staff and so forth).
Interested firm’s attention is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” Fourth Edition of November 2020, setting forth the World Bank’s policy on conflict of interest.
A Consultant will be selected in accordance with the Quality and Cost- Based Selection (QCBS) method set out in the Consultant Guidelines.
Further information can be obtained at the address below during office hours i.e., 9.00 a.m. to 4.00 p.m. (Local time).
Expressions of interest must be sent in hard copy to the address below or by soft copy to the email addresses procurement@nigeriadid4d.org and copied to nimcid4d@nimc.gov.ng latest on Friday 11 November, 2022 at 4:00 pm (local time)
The Coordinator,
Project Implementation Unit,
Nigeria Digital Identification for Development Project
Ecosystem BuildingNational Identity Management Commission (NIMC) HQ
11 Sokodc Crescent, off Dalaba Street
Zone 5 Wuse, Abuja – Nigeria
Email: procurement@nigeriadid4d.org.
Website: www.nimc.gov.ng
