REQUEST FOR EXPRESSIONS OF INTEREST
(CONSULTING SERVICES - FIRMS SELECTION)
Country: West Bank and Gaza
Project Name: Phase 3 Advancing Sustainability in Performance, Infrastructure, and Reliability of the Energy Sector in the West Bank and Gaza
Grant No.: P507260
Assignment Title: Sector-Wide Cybersecurity, Business Continuity, Framework & Policy Development
Reference No .: GZ-PENRA-530256-CS-QCBS
The Palestine Liberation Organization has received financing from the World Bank toward the cost of Phase 3 Advancing Sustainability in Performance, Infrastructure, and Reliability of the Energy Sector in the West Bank and Gaza (ASPIRE III) and intends to apply part of the proceeds for consulting services.
The consulting services ("the Services") include consultancy service for Sector-Wide Cybersecurity, Business Continuity, Framework & Policy Development . The expected implementation period is six (6) months.
The detailed Terms of Reference (TOR) for the assignment can be obtained from the address and/or the electronic websites given below:
Attention: Procurement Officer
Al Masayef. - PENRA Building/4th floor
City: Ramallah
Telephone: +9722 2984752, or +970 2 2984752
Facsimile number: +9722 2984753 or +970 2 2984753
Electronic mail address: [email protected]
Higher Council for Public Procurement Policies’ electronic website: https://www.shiraa.gov.ps
The Palestinian Energy & Natural Resources Authority now invites eligible consulting firms ("Consultants") to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The shortlisting criteria are:
1. Relevant Sector Experience
The Firm must have demonstrated experience delivering:
Cybersecurity frameworks and governance models
OT/ICS cybersecurity programs and assessments (IEC 62443 aligned)
BCM/DR frameworks and crisis management structures
Policy development and harmonization across multiple entities
Sector-wide or national-level cybersecurity initiatives
Minimum Requirement:
At least two (2) similar assignments in the utility, energy, critical infrastructure, or public-sector domain within the past seven years.
2. OT/ICS (IEC 62443) Expertise
The Firm must have proven experience with:
OT governance and lifecycle management
ICS/SCADA assessments, substations, PLC/RTU, historian systems
Zones & conduits architecture (IEC 62443-3-2)
OT risk assessment methodologies
OT-specific policy development
Minimum Requirement:
At least one major project involving IEC 62443 implementation or OT/ICS cybersecurity.
3. Information Security Framework Expertise
The Firm must demonstrate proficiency in developing and aligning frameworks with:
NIST Cybersecurity Framework (CSF)
ISO/IEC 27001:2022
ISO 22301 (BCM/DR)
SIEM/SOAR governance and SOC operations
Requirement:
Ability to harmonize multiple standards into a unified sector-wide approach.
4. Policy and Governance Development Capability
The Firm must demonstrate capacity to develop:
Comprehensive cybersecurity and SOC policies
OT/ICS-specific policy suites
BCM/DR governance policies
Sector-wide governance models and RACI matrices
Requirement:
Evidence of high-quality, bilingual (Arabic and English) policy outputs.
5. Regional and Institutional Knowledge
Experience working with:
Utilities or energy sectors in the Middle East region
Governmental, regulatory, or donor-funded institutions
Multi-stakeholder or cross-entity coordination environments
Advantage (Preferred, not mandatory):
Demonstrated familiarity with Palestinian sector dynamics.
6. Multidisciplinary Team Capacity
The Firm must be able to deploy a team with combined expertise in:
Cybersecurity governance
OT/ICS security
BCM/DR
SOC architecture and SIEM/SOAR
Policy drafting and documentation
Project management and stakeholder engagement
Requirement:
Ability to support a 6-month assignment with dedicated resources.
7. Quality Assurance & Methodology
The Firm must demonstrate:
Documented internal QA/QC processes
8. Clear methodology for reviews, version control, and stakeholder alignment
Ability to ensure consistency across large, multi-document deliverable packages
9. Financial and Administrative Capacity
The Firm must demonstrate the administrative capability and financial stability needed to manage a multi-entity project of this scale.
Requirement:
Audited financial statements for at least two years .
Key Experts will not be evaluated at the shortlisting stage.
The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s "Procurement Regulations for IPF Borrowers" dated February 2025, sixth edition ("Procurement Regulations"), setting forth the World Bank’s policy on conflict of interest.
Consultants may associate with other firms to enhance their qualifications, but should indicate clearly whether the association is in the form of a joint venture and/or a sub-consultancy. In the case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected.
A Consultant will be selected in accordance with the
Quality and Cost based Selection (QCBS)
method set out in the Procurement Regulations.
Further information can be obtained at the address below during office hours 9:00 a.m.-2:00 p.m. (Palestine local time).
Expressions of interest must be delivered either in a written form (by courier/in person) or electronically (by email; signed, initialed, stamped, and accompanied by power of attorney to sign) to the address/email below by 12:00 p.m. (Ramallah Local Time, GMT +3) on 06/04/2026 .
Attention: Procurement Officer
Al Masayef. - PENRA Building/4th floor
City: Ramallah
Telephone: +9722 2984752, or +970 2 2984752
Facsimile number: +9722 2984753 or +970 2 2984753
Electronic mail address: [email protected]
Higher Council for Public Procurement Policies’ electronic website: https://www.shiraa.gov.ps