Vulnerability Assessment & Penetration Testing Services for Remediation of E-Citizen Platform
This tender has expired
The submission deadline for this tender has passed. It is no longer accepting bids.
About This Opportunity
Request for Expression of Interest | Project: Kenya Digital Economy Acceleration Project | Method: Quality And Cost-Based Selection | Ref: KE-ICTA-526653-CS-QCBS
This is a consulting contract in the infrastructure, education and training and water and sanitation sectors. Located in Kenya, Africa, this opportunity is open to firms and consortiums. Proposals must be submitted before June 24, 2026.
Published through WB - World Bank, a multilateral development bank that follows standardized international procurement guidelines. Projects funded by multilateral institutions are generally open to international bidders from eligible member countries for consulting in the infrastructure sector. Consulting assignments are typically evaluated with a strong emphasis on the technical proposal, including the methodology and qualifications of key experts. Shortlisted firms may be invited to submit financial proposals in a second stage. Interested parties should review the full documentation on the original source before submitting their proposal.
Description
THE INFORMATION AND COMMUNICATIONS TECHNOLOGY AUTHORITY
KENYA DIGITAL ECONOMY ACCELERATION PROJECT (KDEAP)
ICTA-PROGRAM IMPLEMENTATION UNIT
REQUEST FOR EXPRESSION OF INTEREST
(Consulting Services – Firms Selection)
Country: Kenya
Name of project: Kenya Digital Economy Acceleration Project (KDEAP)
Project No.: P170941
Credit No: 7289-KE and 7290-KE
Assignment Title: Vulnerability Assessment & Penetration Testing Services for Remediation of ECitizen Platform
Contract No.: KE-ICTA-526653-CS-QCBS
1. The Government of Kenya has received financing from the World Bank towards the cost of the Kenya Digital Economy Acceleration Project (KDEAP) and intends to apply part of the proceeds for consulting services.
2. The consulting services (“the Services”) include Vulnerability Assessment & Penetration Testing for Remediation of ECitizen Platform. The assignment is expected to take six (6) calendar months from the date of contract commencement.
3. The detailed Terms of Reference (TOR) for the assignment can be found at the following website: www.icta.go.ke and www.tenders.go.ke/tenders or can be obtained at the address given below.
4. The Information and Communications Technology Authority through the Program Implementation Unit (PIU) now invites eligible consulting firms (“Consultants”) to indicate their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services. The shortlisting criteria are:
a) Core business and years in business: The firm must be formally registered and incorporated as a consulting firm with a core business demonstrably in cybersecurity, information security, IT governance, risk and compliance (GRC), or an equivalent field. This specialization must have been maintained for a minimum period of Eight (8) years. This extensive operational history indicates a depth of experience necessary for a project of this magnitude.
b) Relevant experience: The firm shall demonstrate having successfully executed and completed at least five (5) assignments of a similar nature and complexity. This includes large-scale enterprise cybersecurity remediation, projects involving government digital platforms, or critical national infrastructure. These assignments must have been completed within the last seven (7) years. Experience in a similar operating environment is crucial, as government systems often present unique bureaucratic, procurement, and political complexities that differ significantly from the private sector. Detailed information for each similar assignment, including the name and address of the client, the scope of work, value, and period of execution, must be provided with the Expression of Interest.
c) Technical and managerial capability of the consulting firm: The firm must demonstrate the requisite technical capacity, including access to advanced cybersecurity tools, proven methodologies, and established frameworks. Furthermore, it must exhibit strong managerial capability, evidenced by project management certifications, a robust organizational structure, and rigorous quality assurance processes, all necessary to undertake an assignment of this national significance. This demonstration should be clearly articulated in the submitted company profile(s).
Key Experts will not be evaluated at the shortlisting stage.
5. The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” First Published July 2016 and Revised Fifth Edition September 2023 (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest.
6. Consultants may associate with other firms to enhance their qualifications but should indicate clearly whether the association is in the form of a joint venture and/or a sub-consultancy. In the case of a joint venture, all the partners in the joint venture shall be jointly and severally liable for the entire contract, if selected.
7. A Consulting firm will be selected in accordance with the Quality and Cost Based Selection (QCBS) method set out in the Procurement Regulations.
8. Further information can be obtained at the address below during the following office hours 0900 and 1600 hours from Monday to Friday excluding lunch hour (1300 to 1400hours) East African Time (EAT) and public holidays.
9. Expression of interest must be delivered in written form by 24th June 2026 at 1000hours EAT. - using one of the following modalities: (i) deposit in the tender box located on 12th Floor, Telposta Towers, Kenyatta Avenue in Nairobi, Kenya or (ii) send by email to: procurement@ict.go.ke and quote the Assignment title and Contract No. in the subject row. For expressions of interest that will be deposited at the tender box, the packages should be clearly marked Vulnerability Assessment & Penetration Testing Services for Remediation of ECitizen Platform Contract No. KE-ICTA-526653-CS-QCBS
Address:
Chief Executive Officer,
The Information and Communications Technology Authority,
P.O Box 27150, Kenyatta Avenue
00100, Nairobi, Kenya.
Tel.: (+254) 20 667 6999
E-mail: info@ict.go.ke / procurement@ict.go.ke
Attn: Deputy Director, Supply Chain Management
Data provenance
This notice is sourced from WB - World Bank and was originally published on June 9, 2026. Last refreshed 3 days ago. Reference: OP00449974. BidsFactory mirrors official procurement notices and links back to the source for full legal text.
About Kenya Digital Economy Acceleration Project
Kenya Digital Economy Acceleration Project has issued 18 procurement notices on BidsFactory, including 7 currently open and 10 awarded contracts. Activity concentrates in Information & Communication Technology, Transport & Logistics, and Education & Training. All notices are published for Kenya. Notices are distributed via WB - World Bank. Most recent publication: June 16, 2026.
Frequently asked questions about this tender
When does this tender close?
The submission deadline is June 24, 2026. Proposals must be received by the contracting authority before that date.
Who is the contracting authority?
This notice was issued by Kenya Digital Economy Acceleration Project in Kenya. The authority is responsible for evaluating bids, awarding the contract, and managing performance.
What type of contract is this?
This is a Consulting contract in the Infrastructure sector. The classification helps bidders match the opportunity to their qualifications and registered scope of supply.
Where will the contract be performed?
The contract is for delivery in Kenya. Foreign bidders should review local registration, taxation, and any in-country presence requirements before submitting.
How can I submit a bid?
Visit WB - World Bank to access the full notice, required documents, and submission instructions. Quote reference OP00449974 when communicating with the contracting authority.
Find tenders like this automatically
Set up alerts and filters that match your business — never miss a relevant opportunity again.