REQUEST FOR EXPRESSIONS OF INTEREST
“SWIFT CSP 2021 Independent Assessor for the AfDB SWIFT System”
AFRICAN DEVELOPMENT BANK
Avenue Joseph Anoma, 01 B.P. 1387, Abidjan, CÔTE D’IVOIRE
Cyber Risk Unit
E-mail : InfoSec@AFDB.ORG
Telephone : (+225) 20 26 3160/ (+225) 20 26 25 30
- The African Development Bank (AfDB) hereby invites Consulting Firms to indicate their interest in the following Assignment : SWIFT CSP 2021 Independent Assessor for AfDB Swift system ;
- The African Development Bank Group (AfDB) is seeking the services of an experienced SWIFT auditors Consulting firm (hereafter called “The Consultant”) for conducting a gap analysis as per the SWIFT CSCF-2021 framework. Which is a part of SWIFT Customer Security Programme [CSP] to reinforce the security of the global financial community. Details of work involved in GAP Analysis as per Customer Security Controls Framework (CSCF) is mentioned in the detailed Scope of Service below.
- SCOPE OF SERVICE :
The following broad activities are required to be carried out by the Consulting firm in SWIFT setup on premise at LIVE environments at Data Centre (DC) in Abidjan, COTE D’IVOIRE and at LIVE environment at Disaster Recovery (DR) Site Centurion, SOUTH AFRICA. The minimum specified scope of work to be undertaken by the selected bidder is mentioned below:
Technical Scope :
- Security review and assessment covering all the controls mentioned in CSCF-2021 framework ;
- Security assessment and Gap analysis report to be submitted within 15 days from purchase order date ;
- Technical assistance to address identify gaps ;
- Compliance assessment and final assessment report to be completed by end of the contract expiration date.
Business Scope :
- Assess the Bank compliance with SWIFT CSP v2021 and help the Bank to get the related Attestation by addressing eventual gaps ;
- Submission of project completion Certificate and Acceptance Certificate as per format prescribed, duly signed by the African Development Bank official ;
- All claims for business / functional / technical delivery made by the Consulting firm in their responses / proposals to this EOI shall be assumed as deliverable, within the quoted financials.
Methodology :
The bidder shall follow SWIFT CSP framework v2021 as work baseline for attestation purpose.
The proposed Methodology should cover the following key activities :
- SWIFT infrastructure review ;
- Gap Analysis as per CSP v2021 ;
- SWIFT Security Assessment for DC and DR servers d. SWIFT Network Assessment ;
- Assessment Report Delivery ;
- Technical assistance to address identify gaps ;
- Final report submission ;
- Assistance for submitting the attestation to SWIFT.
- The Cyber Risk Unit invites eligible firms to indicate their interest in providing these services. Interested eligible Consulting Firms or associations of Consulting Firms shall provide information on their qualifications and experience demonstrating their ability to provide the services (documentation, references for similar services, experience in comparable assignments, availability of qualified staff, etc.) ;
- The eligibility criteria, the establishment of a short list and the selection procedure shall be in conformity with the Bank’s Procurement Policy and Procedures for Recruitment of Corporate Consultants. Please, note that interest expressed by a Consulting Firm does not imply any obligation on the part of the Bank to include it in the shortlist ;
- The implementation timeline will be over a period of one (01) month. The tentative start date is 01 November 2021 ;
- The work will be carried out Remotely ;
- Interested Consulting Firms may obtain further information at the address below during office hours 09:00 to 17:00 hours, Abidjan Local Time ;
- Expressions of interest must be sent by email at the address below before Tuesday 12th October 2021 17:00 hours, Abidjan Local Time and mention “SWIFT CSP 2021 Independent Assessor for AfDB Swift system”.
For the attention of: Cyber Risk Unit African Development Bank
Cyber Risk Unit
Avenue Joseph Anoma, 01 B.P. 1387, Abidjan, Côte d’Ivoire
Tel: (+225) 20 26 22 61
Email : InfoSec@AFDB.ORG