Consultancy services for Webtrust audit and AATL recognition programme for the Uganda National Public Key Infrastructure

REQUEST FOR EXPRESSION OF INTEREST (CONSULTING SERVICES – FIRMS SELECTION) UGANDA UGANDA DIGITAL ACCELERATION PROJECT – GOVERNMENT NETWORK (UDAP-GOVNET) PROJECT ID-P171305

LOAN NUMBER: IDA-68980

REFERENCE NUMBER: NITA-UDAP/CONS/26-27/00005

ASSIGNMENT TITLE: CONSULTANCY SERVICES FOR WEBTRUST AUDIT AND AATL RECOGNITION PROGRAMME FOR THE UGANDA NATIONAL PUBLIC KEY INFRASTRUCTURE

The Government of Uganda, represented by the National Information Technology Authority - Uganda (NITA-U), has received financing from the World Bank towards the cost of the Uganda Digital Acceleration Project - Government Network (UDAP-GOVNET) and intends to apply part of the proceeds for consultancy services for Webtrust Audit and AATL Recognition Programme for the Uganda National Public Key Infrastructure

The consulting services (“the Services”) include consultancy services for Webtrust Audit and AATL Recognition Programme for the Uganda National Public Key Infrastructure .

The objective of the assignment is to obtain independent, internationally recognized assurance and trust-list recognition for Uganda’s National Public Key Infrastructure (PKI), thereby strengthening its credibility, security and interoperability with internationally recognized digital trust frameworks. Specifically, the assignment will engage a licensed and independent WebTrust for Certification Authorities practitioner to conduct a formal audit, including evidence review, remediation tracking and certification support for one year; prepare, submit and coordinate the Adobe Approved Trust List (AATL) recognition process to facilitate document-signing trust and interoperability, including coverage of the annual programme fee for one year; and provide ongoing certification maintenance and query-response support throughout the one-year assurance period.

The Implementation period of the assignment is Five (5) Months from the date of signing the contract.

The detailed Terms of Reference (TOR) for the assignment can be found at the following website: https://www.nita.go.ug/opportunities/bids-and-tenders

The National Information Technology Authority - Uganda now invites eligible consulting firms (“Consultants”) to indicate their interest in providing the services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The Shortlisting Criteria for the firm’s capacity and experience are:

The firm should have completed at least Two (2) WebTrust for Certification Authorities audits or equivalent assessments (e.g., ETSI EN 319 401/411) for CA/PKI environments within the last five (5) years. Submit the firm’s organogram to demonstrate the firm’s technical and managerial capability; Presence of appropriate skills among staff; Lead WebTrust Auditor / Practitioner and AATL AATL Technical Liaison Specialist (please do not submit CVs and biodata of experts at this stage).

The attention of interested consultants is drawn to Section III, paragraphs 3.15 and 3.16, of the World Bank’s ‘ Procurement in Investment Project Financing Goods, Works, Non-Consulting and Consulting Services, Seventh Edition September 2025 (Procurement in investment Project Financing; Goods, Works, Non-Consulting and Consulting Services), setting forth the World Bank’s policy on conflict of interest.

Consultants may associate with other firms to enhance their qualifications, but should indicate clearly whether the association is in the form of a joint venture and/or a sub-consultancy. In the case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected.

A consultant will be selected in accordance with the Least Cost Selection (LCS) method set out in the World Bank Procurement Regulations “ Procurement in Investment Project Financing Goods, Works, Non-Consulting and Consulting Services, Seventh Edition September 2025” .

Further information can be obtained at the address below during office hours at the address below 08:00 to 17:00 hours from Monday to Friday at the address given below.

Expressions of Interest (One original plus two copies) must be delivered in a written form to the address below (in person or by e-mail) on or before 3rd September 2026 at 11:00am Consultants not located in the Country may submit their REOIs through the provided email address.

The packages must be clearly marked as; “ Expression of Interest for consultancy services for Webtrust Audit and AATL Recognition Programme for the Uganda National Public Key Infrastructure ”

The Procurement Officer, National Information Technology Authority-Uganda Palm Courts, Plot 7A Rotary Avenue,1st Floor Kampala-Uganda,

Email: [contact details removed]

Any form of canvassing or lobbying for the tender shall lead to automatic disqualification. EXECUTIVE DIRECTOR.