ConceptioArchiveWorld Bank
World Bankopen access

Development of Critical Information Infrastructure Protection (CIIP) Capacities — Digitally Connected and Resilient Samoa Project (Samoa)

World Bank · World Bank
World Bank · Contracts · License: Open Access
Open Source ↗
basedselectionqualityandcostrequestforexpressionofinterest
world bank, public procurement, procurement notice, international development, OP00435689, Digitally Connected and Resilient Samoa Project, Samoa, Request for Expression of Interest, Quality And Cost-Based Selection, Published

REQUEST FOR EXPRESSION OF INTEREST

(Consulting Services - Firms Selection)

Country: Independent State of Samoa

Name of Project: Digitally Connected and Resilient Samoa Project (DCSRP)

Grant No.: E379-WS

Assignment title: Development of Critical Information Infrastructure Protection (CIIP) Capacities

Reference No.: DSP/CS/03

1. The Government of Samoa (GoS) has received financing from the World Bank toward the cost of the DCRSP P180807 and intends to apply part of the proceeds for consulting services. This project aims to enhance the capacity of the Government to deliver digitally enabled, inclusive, secure and safe public services. The Project will focus on digital connectivity and digital government infrastructure, including an upgrade and extension of Samoa’s national fiber network, alongside measures to enhance cybersecurity resilience and safeguard the reliability of essential digital services.

2. The Consulting services ("Services") will support the design, establishment and operationalization of Samoa’s Critical Information Infrastructure Protection (CIIP) framework. This will include the development of governance, legal and institutional frameworks; the identification of critical information infrastructures (CIIs) across government sectors and the preparation of practical guidelines to assist the CII operators in protecting and managing critical systems and assets. The Services will also support the implementation of the CIIP framework by establishing effective coordination, supervision and oversight mechanisms while strengthening national capacity through technical guidance and stakeholder engagement. The assignment will be executed by the selected firm, with an estimated duration of 24 months, ensuring the completion of all tasks within the specified timeline. The consulting firm is expected to commence work in May 2026.

3. The Ministry of Communications and Information Technology now invites eligible consulting firms ("Consultants") to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The shortlisting criteria are:

At least five (5) years of experience in conducting Cybersecurity or ICT Security matters on a national level. Demonstrated experience working with government and public sector institutions

, particularly in areas related to critical information infrastructure

, will be considered an advantage

Experience in CIIP planning and frameworks, Critical Infrastructure (CI) Identification Procedures; Guideline development and implementation; and experience in CERT operations or cyber exercises

Demonstrated expertise in risk assessment, incident response and CII governance

Experience facilitating technical workshops, consultations or capacity building sessions with government agencies, regulators and operators.

Strong background in capacity building and training, with experience in designing and delivering training programs.

Moderate experience in and / or demonstrates a proficiency level enough to lead the planning, development and execution of a stakeholder strategy in support of the defined objectives.

Stakeholder Strategy, Planning and Execution

4. The attention of interested Consultants is drawn to Section III, paragraphs, 3.14,3.16 and 3.17 of the World Bank’s "Procurement Regulations for IPF Borrowers" September 2023, setting forth the World Bank’s Policy on conflict of interest.

5. Consultants may associate with other firms to enhance their qualifications but should indicate clearly whether the association is in the form of a joint venture ("JV") and/or a sub-consultancy. In the case of a JV, all the partners in the JV shall be jointly and severally liable for the entire contract, if selected.

6. A Consultant will be selected in accordance with the Quality and Cost-Based Selection (QCBS) method set out in the Procurement Regulations in paragraph 4.

7. The detailed Terms of Reference (TOR) for the assignment can be found at the following websites: Ministry of Communications and Information Technology (www.mcit.gov.ws) and the Ministry of Finance (www.mof.gov.ws/tender-adverisements)

8. Further information can be obtained at the address below during working hours from 9.00am to 4.00pm, Samoa time, on working days:

Ms. Athena Matalavea

Principal Cyber Incident Response Coordinator and Analyst

Digital Transformation and Innovation/Samoa Computer Emergency Response Team

Level 6, Tui Atua Tupua Tamasese Efi (TATTE) Building

Apia, Samoa

Email: [email protected]

Phone: +685 26117

9. Expressions of interest must be delivered in a written form to the address below in person OR via electronic submission through the GoS e-Tendering Portal https://portal.tenderlink.com/mof_samoa/ by Tuesday, 07 April 2026, 11am Samoa time .

The Secretary, Tenders Board

Ministry of Finance

Level 4, Central Bank of Samoa Building

2 Apia City Boulevard

Apia, Samoa

Tel: +685-34333

Related documents

Record · ID 606695
Conceptio Open Knowledge Archive — every document is proof-bundled with source, license, and retrieval metadata.