CONSULTING SERVICE FOR REVIEW OF THE CURRENT NATIONAL PUBLIC KEY INFRASTRUCTURE (NPKI) SET UP (INDIVIDUAL CONSULTANT)

THE INFORMATION AND COMMUNICATIONS TECHNOLOGY AUTHORITY TENDER NOVEMBER 2024 

REQUEST FOR EXPRESSION OF INTEREST

(Consulting Services – Individual Selection)

1. This Request for Expression of Interest follows the General Procurement Notice for this project that appeared in
MyGov Newspaper on 24th October, 2023.
2. The Government of Kenya has received financing from the World Bank towards the cost of the Kenya Digital Economy
Acceleration Project (KDEAP) and intends to apply part of the proceeds for consulting services.
3. The consulting services (“Services”) include Review, Assessment and Provision of Professional Recommendation on
the Current Deployment of National Public Key Infrastructure (NPKI) – Government Certification Authority (GCA) in
compliance to E-CSP Regulatory Compliance. The assignment is expected to be completed within three (3) calendar
months from the date of contract commencement.
4. The detailed Terms of Reference (TOR) for the assignment can be found at the following website:
www.icta.go.ke/tenders /www.tenders.go.ke
5. The Information and Communications Technology Authority (the “Client”) through the Project Implementation Unit
(PIU) of Kenya Digital Economy Acceleration Project (KDEAP) now invites eligible individual consultants (“Consultants”)
to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating
that they have the required qualifications and relevant experience to perform the Services (attach detailed
curriculum vitae (CV), copies of documentary evidence of academic qualifications, professional qualifications, and
registration/licensing with professional bodies (as applicable). The shortlisting criteria is:
a) Qualification: A minimum of a Master’s degree in computer science, Cybersecurity, Science/Technology
and/or other relevant fields.
b) General Experience: A Minimum of 7 years of experience in Cybersecurity program Experienced with
FIPS-certified smart cards, HSMs, FIDO-based U2F and UAF tokens, and OATH-based algorithms for TOTP
and HOTP protocols.
c) Specific Experience: At least five (5) years of experience in risk management and CIIP, preferably at the
national level. PKI Infrastructure Compliance Audit: Specific experience in leading an audit and compliance
efforts for digital trust services, ensuring adherence to frameworks such as Web Trust, SOC 2, and CCA or
similar.
d) Registration/certification: Relevant certifications, such as CISA (Certified Information Systems Auditor)
professional certification offered by ISACA (Information Systems Audit and Control Association), or Certified
Lead auditor in ISO 27001, or Security Manager (CISM), or Certified Critical Infrastructure Protection Professional
(CCIPP).
6. The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s
“Procurement Regulations for IPF Borrowers” First Published July 2016 and Revised Fifth Edition September 2023,
(“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest.
7. A Consultant will be selected in accordance with the Selection of Individual Consultants method set out in the Procurement
Regulations.
8. Further information can be obtained at the address below from 0900 to 1700 hours East African Time (EAT) from
Monday to Friday excluding lunch hour (1300 to 1400hours EAT) and public holidays.
9. Expressions of interest must be delivered in a written form to the address below by 28th November 2024 at
1000hours East African Time using one of the following modalities: (i) deposit in the tender box located on
12th Floor, Telposta Towers, Kenyatta Avenue in Nairobi, Kenya or (ii) send by email to: procurement@ict.go.ke and
quote the Assignment title and Contract No. in the subject row. For expressions of interest that will be deposited at
the tender box, the packages should be clearly marked CONSULTING SERVICE FOR REVIEW OF THE CURRENT
NATIONAL PUBLIC KEY INFRASTRUCTURE (NPKI) SET UP (INDIVIDUAL CONSULTANT); Contract No. KE-ICTA-
438071-CS-INDV.
Address:
Chief Executive Officer,
The Information and Communications Technology Authority,
P.O Box 27150, Kenyatta Avenue
00100, Nairobi, Kenya.
Tel.: (+254) 20 667 6999
E-mail: info@ict.go.ke / procurement@ict.go.ke
Attn: Deputy Director, Supply Chain Management