Governmental Security Operations Center (GOVSOC) in DRC

DIGITAL TRANSFORMATION PROJECT "PTN" Specific Notice of Invitation to Tender (AA0) Tender No: ZR-UGP - PTN-542824-GO-RFB Project: DIGITAL TRANSFORMATION PROJECT Buyer: DIGITAL TRANSFORMATION PROJECT MANAGEMENT UNIT (UG PTN) Country: DEMOCRATIC REPUBLIC OF CONGO Market Title: Governmental Security Operations Center (GOVSOC) Credit No: 7602-ZR (World Bank) Co-financing Agreement AFD No: CCD 1198 01 H (French Development Agency) Issued on: May 13, 2026 1.The Government of the Republic of Congo has received two financing facilities, one from the World Bank and the second from the French Development Agency, to finance the cost of the Digital Transformation Project, and intends to use part of this financing to make payments under the Contract for the Supply of equipment (servers and licenses) for the Governmental Security Operations Center (GOVSOC): "For this contract, the Borrower will use the Direct Payment disbursement method, as defined in the World Bank's Disbursement Guidelines for Investment Project Financing, except for payments for which the contract provides for the use of a documentary credit." 2.The Digital Transformation Project Management Unit (PTN) invites sealed bids from eligible bidders meeting the required qualifications for the accelerated setup of a Governmental Security Operations Center (GOVSOC) intended to perform, at a minimum, the following functions at the pilot scope level: • Centralized and secure collection of cyber logs/events and telemetry; • Real-time (near) detection (correlation, rules, use cases) and alerting; • Incident management (qualification, escalation, resolution, post-mortem); • Minimum 16/7 monitoring (baseline MVP Minimum Viable Product), expandable to 24/7 based on the offer; • Dashboards and decision-making reporting; • Transfer of skills and complete documentation. The MVP monitoring model is set at 16/7 (06:00-22:00, local time). Description of Supplies and Related Services Requested Quantity Delivery Location/ Installation I. Technical Infrastructure – DATA CENTER (42U RACK) I.1. SIEM Servers (High Availability Cluster) • 1U or 2U rack format • 2 x CPU (minimum 16–24 cores each)• 2 RAXIO DATA CENTER RDC Offices 12th street Limete Industrial, Kinshasa Democratic Republic of Congo (DRC) I.2 Management / Orchestration Server • Minimum 16-core CPU • 64–128 GB RAM • 2 x 10Gb • RAID 1 SSD 1 I.3 Log Collector Servers • 12–16 core CPU • 128 GB RAM Ingestion capacity of 5k EPS per collector minimum with redundancy 2 I.4 SOAR Server • 24-core CPU • 256 GB RAM • 2 TB SSD storage 1 I.5 EDR Management Server The proposed EDR solution must be sized to ensure the protection and management of at least 1000 endpoints within the MVP framework. 1 I.6 SAN/NAS Storage • Raw capacity suitable for 180 days hot storage • RAID 10 or equivalent • Throughput ≥ 5–10 Gb/s • Expandable to 12 months 1 I.7 Security & Network Rack • IP KVM 1 • Dedicated SOC segmentation Firewalls 2 • Routers (front/back-end): routing and high availability functions (VRRP/HSRP), BGP/OSPF support, IPsec if required, 1/10GbE interfaces. 2 • 10Gb ToR Switch 1 • Intelligent PDUs 2 II. LICENSES TO BE SUPPLIED (MVP) II.1 SIEM • Minimum 10,000 EPS license • 180-day retention • Reporting module • API & integration • 3-year vendor support 1 RAXIO DATA CENTER RDC Offices 12th street Limete Industrial, Kinshasa Democratic Republic of Congo (DRC) II.2 EDR • 1,000 endpoints • Machine isolation function • SIEM integration 1 II.3 SOAR • Automated playbooks • Firewall + EDR connectors 1 II.4 Systems • Server OS • Hypervisor license (if virtualized) • Backup license 1 III. SOC ROOM – SETUP & EQUIPMENT 3.1. Analyst Workstations Equipment Quantity N1 Workstations 6 N2 Workstations 2 Manager Station 1 Dual Monitors 18 IP Phones 8 1 Secretariat of Digital Economy Intersection of Avenue du Livre and Avenue des Huileries Commune de la Gombe City Province of Kinshasa Democratic Republic of Congo 3.2 Monitoring Wall • 4–6 screens 55–65” • Video controller • Secure wall mount 1 3.3 SOC Room Security • Biometric access control • CCTV • Access log • Reinforced door 1 3.4 Technical Works • Dedicated electrical circuit • UPS (30–60 min) • Dedicated fiber link to DC • Dedicated air conditioning • Acoustic treatment 1 3.5 Progressive implementation of physical security requirements 1 3. The Market will be conducted through International Competitive Bidding (ICB) as defined in the "World Bank Procurement Regulations for Investment Project Financing Borrowers", September 2025, and open to all eligible country bidders as defined in the said Regulations. 4.

Interested and eligible Bidders may obtain