Hire a firm to conduct IT audit including review of status of planned, procured and status of software, hardware and information systems

REQUEST FOR EXPRESSIONS OF INTEREST (CONSULTING SERVICES– FIRMS SELECTION)

COUNTRY:

Ethiopia

NAME OF PROJECT:

Africa Centres for Disease Control Support Program to Combat Current and Future Public Health Threats Project (P178633)

GRANT NO.:

IDA-E1110

ASSIGNMENT TITLE:

Hire a firm to conduct Comprehensive IT Audit including Review of Status of Planned, Procured and Status of Software, Hardware and Information Systems of Grant 1 and Grant II

REFERENCE NO.:

ET-AUC-544874-CS-CQS

ISSUE DATE:

12 October 2026

The Africa Centres for Disease Control and Prevention (Africa CDC) is implementing two World Bank-funded projects Africa CDC Support Program to Combat Current and Future Public Health Threats Project (P178633: IDA E1110) and Africa CDC Regional Investment Financing Project (P167916: IDA D5260) aimed at strengthening continental capacity in disease prevention, detection and response and intends to apply part of the proceeds for consulting services. The projects rely significantly on information technology systems, infrastructure, digital platforms and data to support programme implementation, financial management, procurement, reporting, surveillance and other operational activities. Substantial investments have also been made in IT procurement, including hardware, software, software licensing and subscriptions, cloud services, cybersecurity solutions, infrastructure, consultancy and system implementation services. In this context, an independent and comprehensive IT audit is required to provide assurance to management and relevant stakeholders on the governance, procurement, implementation, security, operational effectiveness, asset management and value for money of IT resources and systems financed or used in support of the two projects. The audit is intended to assess both the compliance of IT-related expenditures and procurement activities and the effectiveness of the resulting technology environment. It shall therefore consider the complete lifecycle from planning and procurement through implementation, operation, maintenance, support, renewal and, where applicable, retirement or disposal. The consulting services (“the Services”) include to provide an independent, evidence-based assessment of the adequacy, effectiveness, compliance, security, integrity, availability, operational resilience and value for money of IT expenditures, systems, infrastructure and controls supporting Grant I and Grant II. It is expected that the consultancy will be undertaken within a period of 80 days. The expected start date of the assignment is November 2026. The detailed Terms of Reference (TOR) for the assignment can be obtained at the address given below. The African CDC now invites eligible consulting firms (“Consultants”) to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The shortlisting criteria are:

1. Core business of the firm(s) and years in business

2. Relevant experience of the firm related to the assignment which should include the following: Minimum of ten years of relevant IT audit experience; Demonstrated experience in IT governance, cybersecurity, systems and technology controls, audit and information security; and Experience leading multidisciplinary IT audit assignments including World Bank-funded projects

3.Technical and Managerial capability of the firm (Provide only the structure of the organization, general qualifications, and number of key staff. Do not provide CV of the staff. Key Experts will not be evaluated at the shortlisting stage). The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” July 2016 Revised September 2025 (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest. Consultants may associate with other firms to enhance their qualifications but should indicate clearly whether the association is in the form of a joint venture and/or a sub-consultancy. In the case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected. A Consultant will be selected in accordance with the Consultant’s Qualification-Based Selection method set out in the Procurement Regulations. Further information can be obtained at the address below during office hours 8:00 to 17:00 hours, Addis Ababa Time. Expressions of interest must be delivered in a written form to the address below (by e-mail) before 26 October 2026 at 17:00 Hours Local Time, Addis Ababa, Ethiopia. Africa Centres for Diseases Control and Prevention Supply Chain Division Administration Directorate Lafto Square, Haile Garment, Africa CDC Office, 4th floor, Room No. 408

E-mail: [contact details removed] cc: [contact details removed]