CERT Enhancement, NCA

REQUEST FOR EXPRESSIONS OF INTEREST (REOI)

COUNTRY: Federal Government of Somalia (FGS)

NAME OF PROJECT: Regional Digital Integration Project (EA-RDIP)

PROJECT ID: P176181

Assignment Title: Consulting Services for CERT Enhancement

Reference No.: SO-MOCT-FGS-557101-CS-QCBS

Place of assignment: Mogadishu, Somalia

Submission Date: August 24, 2026 at 2.00pm (Mogadishu, Somalia Local Time).

The Federal Republic of Somalia has received a grant from the International Development Association (IDA) of the World Bank toward the cost of the Regional Digital Integration Project (EA-RDIP), and the Ministry of Communications and Technology intends to apply part of the proceeds for consulting services. The consulting services (“Services”) is required to be undertaken as an external consultant firm supporting the client, National Communications Authority (NCA) in the Federal Government of Somalia to carry out the implementation for the assignment of “Consulting Services for CERT Enhancement” . The consultant firm will undertake all the specific required tasks detailed out in the Terms of Reference (ToR). The consultant service is expected to be conducted and reports delivered within eighteen (18) months from commencement of the contract. Terms of Reference (ToR) can be found at the following website: https://nca.gov.so/opportunities/consultancy or it can be provided upon submission of application in person or by e-mail. The e-mail address is provided below. The Ministry of Communications and Technology now invites eligible consulting firms (“Consultants”) to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services (brochures, description of similar assignments, experience in similar conditions, availability of appropriate skills among staff, etc.).

The short-listing criteria are as follows: Core business of the firm and years in cybersecurity and Information and Communication Technologies (ICT), particularly in the following areas: incident response, cyber threat intelligence should be at least 5 years. i) The Consulting firm should demonstrate at least 2 similar assignments successfully implemented during the last 5 years in Integrating and customization of CSIRT/CERT/CIRT/SOC Tools; Developing policies and procedures related to CSIRT/CERT/CIRT/SOC operations (operational workflows, SOPs, incident management processes, service level management frameworks, among others) is required. ii) Experience in setting up cybersecurity operations center tools, configuring honeypots, integrating external threat-intelligence feeds, and implementing related incident-detection and response capabilities. iii) Demonstrate Extensive knowledge of cybersecurity policy, strategy, and operations in a government context. Demonstrate experience of relevant services implemented in Somalia, or an environment similar to that of Somalia; and The technical and managerial organization of the firm. (Provide only with the structure of the Firm organization) Do not provide CVs of staff . Key experts will not be evaluated at the shortlisting stage.

The attention of interested Consultants is drawn to paragraphs 3.14, 3.16 and 3.17 of the World Bank’s Procurement Regulations for IPF Borrowers: Procurement in Investment Financing - Goods, Works, Non-Consulting and Consulting Services dated September 2025 (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest. Consultants may associate with other firms to enhance their qualifications but should indicate clearly whether the association is in the form of a Joint venture and/ or a Sub consultancy. In case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected. A Consultant will be selected in accordance with the Quality and Cost Based Selection (QCBS ) method set out in the Consultant Guidelines. Interested Consultant may obtain further information in a written communication to the address below during office hours from 9.00am to 4.00pm Mogadishu, Somalia Local Time (Excluding public holidays). Expressions of interest (EOI) should be submitted electronically (by e-mail) to the address below on, or before, August 24, 2026 at 2.00pm (Mogadishu, Somalia Local Time).

To: Procurement Office, EA-RDIP

Project Implementation Unit (PIU) The Ministry of Communications and Technology (MoCT) Federal Republic of Somalia

E-mail: [contact details removed]

Copy to: The Director General of NCA. E-mail: [contact details removed]

Mogadishu, Somalia