Elaboration of the framework for the management, deployment and strengthening of the National Center for Digital Security and establishment of the strategic roadmap for the SOC/ISOC

Description

The Republic of Peru, through the Presidency of the Council of Ministers (PCM), has requested financing from the Inter-American Development Bank (IDB) for the Digital Transformation with Equity Project - PROTDE. This call seeks a consulting firm to structure the strategic, technical and governance framework of the National Center for Digital Security (CNSD). The goal is to consolidate national cybersecurity, establishing a government Security Operations Center (SOC) and an Industrial Security Operations Center (iSOC) that protect the country's critical infrastructure.

Scope of the consultancy
The services are part of the State Reform/Modernization sector and include:

Governance Framework: Create the organizational, normative, and technical structure for the operation of the CNSD, aligned with standards such as ISO 27001, NIST CSF, and IEC 62443.

SOC/iSOC Strategy: Develop the roadmap for the government SOC and the industrial iSOC, defining incident and vulnerability management procedures.

Intelligence and Technology: Identify key technologies such as SIEM, SOAR, and threat intelligence platforms with artificial intelligence support.

Interoperability: Establish coordination mechanisms between levels of government and strategic sectors for an articulated national response to cyberattacks.

Qualification Requirements
The selection will be made in accordance with IDB policies. Interested firms must accredit:

General Experience: Minimum 6 services in technologies or digital governance, with at least 3 performed for national governments.

Specific Experience: At least 4 consultancies in cybersecurity or protection of critical infrastructures in the last 5 years.

Specialization in SOC/CSIRT: Minimum 2 services focused on the design or strengthening of incident response centers of sectoral or national scope.

Technical Solvency: Have executed digital security projects with amounts greater than USD 200,000.00.

Short List: Between 5 and 8 firms will be pre-selected. Joint venture partnership is allowed.

Note: The specifications and terms of reference are available in the official language of the country.