FEDERAL DEMOCRATIC REPUBLIC OF ETHIOPIA
INTEGRATED SECURITY OPERATION CENTRE (ISOC) PROJECT
CONSULTING SERVICES
Request for Expressions of Interest

Country: Federal Democratic Republic of Ethiopia
Name of the Project: Contract for the Detailed Design Study and Implementation Supervision of EEP’s Integrated Security Operation Centre (ISOC)
Loan No.: CET1135 01
Ref.No. EEP/AFD/ISOC/CS/02/2025
Client: Ethiopian Electric Power (EEP)
The Ethiopian Electric Power (EEP) has received a financing from Agence Française de Développement ("AFD"), and intends to use part of the funds thereof for payments under the following project Integrated Security Operation Centre (ISOC) under the National Load Dispatch Centre project (NLDC). 
1.	Project Objective

The objective of this project is to establish a state-of-the-art Integrated Security Operations Centre (ISOC) that enables real-time or near real-time detection, monitoring, control, response, and recovery from cyber-related security incidents by integrating people, processes, and technologies, and leveraging cyber threat intelligence to gain insights into adversaries’ motivations, intentions, and methods. It aims to reinforce the global EEP’s cyber security strategy by implemeting new technologies related to the ISOC including but not limitted to
•	Security Information and Event Management (SIEM): Aggregates and analyzes logs across the GRID infrastructure—including substations, power plants, and the Control Center—in real time to detect potential security incidents centrally.
•	Security Orchestration, Automation and Response (SOAR): Automates and coordinates security incident response workflows to enhance efficiency and reduce manual intervention.
•	User and Entity Behavior Analytics (UEBA): Uses machine learning and behavioral analytics to detect anomalies in user or device behavior that may indicate insider threats, compromised accounts, or data exfiltration.
•	Endpoint Detection and Response (EDR): Provides continuous monitoring, threat detection, and response capabilities at the endpoint level, including workstations and servers.
Additionally the project will include staff training, as well as the development of policies, procedures, and standards necessary for the effective operation and sustainability of the ISOC
2.	Operational Scope of the Consultancy Service

The consultancy service encompasses comprehensive Detailed Design Study, Bidding documents Preparation, Procurement Support, Contract Administration, and Implementation Supervision to ensure the successful execution of the Integrated Security Operations Centre (ISOC) Project within the National Load Dispatch Centre (NLDC).
Services are expected to start on June 2026 and have an approximate total duration of twenty-four (24) months.
The Consultant will provide expert support in the tendering preparation, procurement process, contract management, testing and commissionning, as well as technical, financial and ESSH oversight from project inception to closure. The scope of services includes, but is not limited to, the following: -
•	Activity I – Tendering Document Review 
The Consultant will lead the technical specifications preparation but, further from that, ensures the compliance with EEP’s needs, technical requirements and internal procedures, as well as with AFD procurement guidelines, and integrate these specifications in the AFD templates bidding document.
•	Review and Enhancement of Technical Specifications and Functional Requirements 
•	Development of detailed design
•	Evaluation of Timeliness, Relevance, and Accuracy 
•	Global Legal, Regulatory, and Compliance Review Applicable local and national regulations
•	Compliance with EEP’s and AFD’s Environmental, Social, and Occupational Health & Safety standard requirements 
•	Compliance with international state-of-the-art technology standards and certifications
•	Review of Prepared Specifications and Procurement Requirements 
•	Preparation of Bid Qualification and Evaluation Criteria
•	Support in Launching of Updated Tender and Bid Process Management 
•	Activity II - Selection of Contractors and Contract Awards Activities :
•	A pre-screening of relevant contractors
•	Issuance of Tender Documents and Management of Bidder Inquiries 
•	Refinement of Bid Qualification and Evaluation Criteria 
•	Support in Bidding Process and Bid Evaluation
•	Project Implementation Schedule and Disbursement Planning
	Review, assess and refine the project implementation schedule.
	Assist the preparation of disbursement planning and support the Client in assessing cash flow management,
•	Support in the selection of contractors and in Contract Negotiation  
•	Activity III – Development of operational activities, documentations and framework 
•	Cybersecurity policy and procedures to be formalized
•	Cybersecurity assessment and testing documentation to be formalized
•	Processes to be formalized 
•	Strategic Training Roadmap: 
	Simplified Curriculum, Training content and Training Timeline to ensure continuous skill improvement
•	Conduct ISOC technologies benchmark, deployment of dedicated technologies, & conduct change management for better adaptability across EEP
•	Activity IV – Global Project Management
•	Monitor the KPIs of the project & support monitoring of indicators
•	Definition & implementation of the ISOC Governance Model (Committee / RACI) 
•	Supervision & quality control of deliverables
•	Lead of Project Risk Management
•	Identification of project risk and formalization of a risk matrix
•	Conduct project risk assessment
•	Definition of project risk management and mitigation by action plan
•	Review and Approval of Design Documents Submitted by the Contractor

•	Financial & Administrative Management Support 
•	Verification of timeline observance
•	Reception and Checking of Invoices 
•	Endorsement with “Certification of Service (or Work) Given/Done”
•	Preparation and issuance of Payment Certificates to Contractors and Suppliers
•	Certification of Monthly Progress of Works
•	Project Completion and Commissioning:
•	Commissioning Phase :
	Coordination of Switch-on and Testing with the Client’s Commissioning Team
	Participation in Post Acceptance Testing and Results Review
	Report on Changes Made to the Installation to Meet Acceptance Test Requirements
•	Defect Liability Period Activities:
	Supervise and manage Log, track, and verify fixes
	Liaise between client and contractor
	Ensure SLA and security compliance
	Maintain updated records
	Prepare and issue the defect liability certificate
•	Project Reporting (technical, financial, ESSH)
The Ethiopian Electric Power hereby invites Applicants to show their interest in delivering the Services described above.
This Request for Expressions of Interest is open to: 
        
          
Eligibility criteria to AFD financing are specified in sub-clause 1.3 of the "Procurement Guidelines for AFD Financed Contracts in Foreign Countries", available online on AFD’s website: http://www.afd.fr.
The Applicant shall submit only one application, either in its own name or as a member of a Joint Venture (JV). If an Applicant (including any JV member) submits or participates in more than one application, those applications shall be all rejected. However, the same Subconsultant may participate in several applications.
If the Applicant is a JV, the expression of interest shall include:
	a copy of the JV Agreement entered into by all members, 
or
	a letter of intent to execute a JV Agreement, signed by all members together with a copy of the Agreement proposal, 
In the absence of this document, the other members will be considered as Subconsultants.
Experiences and qualifications of Subconsultants are not taken into account in the evaluation of the applications.
Interested Applicants must provide information evidencing that they are qualified and experienced to perform those Services. For that purpose, documented evidence of recent (less than ten (10) years) and similar services shall be submitted.
1.	Determination of the Applicants will be based on the criterias listed in the below table: 
For each experience submitted by the Applicant, check the boxes of the criteria which are met by the experience .
Name of the Applicant: 	

	Criteria 1 - Experience in designing, planning, procurement, and supervision of the implementation of a Security Operation Centre (SOC/ISOC) project 	Criteria 2 - Experience deploying and managing SIEM tools, SOAR tools, EDR tools, UEBA tools and threat intelligence integration  	Criteria 3 - Experience in critical infrastructure cybersecurity
	Criteria 4 - Experience in the contract and vendors management for cybersecurity projects
	Criteria 5 - Qualified cybersecurity team with relevant experience in critical/strategic infrastructures and DFI financing 	Criteria 6 – Relevant certifications CISSP, CISM OSCP, and IEC 62443 and relevant experience in pentesting strategy and network security management
[Experience A] 						
[Experience B]						
[Experience C]						
[Etc.]						
Total 						

	The nature of the Services are: prepare the tender document, evaluation, clarification response, contract negotiation, project management, design review and approval, test witness and issue payment certificate for Integrated Security Operation Centre Project.
	The technical area and expertise is on contract management of the project as a consultant specifically Design, Supply, Installation, Testing and Commissioning of EEP Integrated Security Operation Centre (ISOC) Project. The applicant should specify and list one or several technical areas.  
	The location is in the region (Africa), in the Client’s country (Ethiopia) or other. 

The selection of Applicants to be shortlisted shall follow the rules as defined herebelow:
•	The Applicant must have at least one experience in each criterion; otherwise the application will be disqualifed.
•	The ranking of Applicants is based on the greatest number of criterion fulfilled (boxes checked).

2.	Determination of the similarity of the experiences will be based on:

	The contracts size; 
	Core business and years in business;
	Relevant Experience in the field of assignment; and
	Technical and managerial capability of the firm. 
The Client will also take into account for the evaluation of the applications the following items:
	Skills and availability of in-house technical back-up experts provided to the on-site experts;
	Local representatives/partners;
	Quality assurance procedures and certifications of the Applicant – ISO 9001 showing that the contractor follows standardized, documented processes for quality management;
	ISO/IEC 27001 (ISMS) proving that the contractor has an information security management system in place.

A Consultant will be selected in accordance with the Quality- and Cost-Based Selection (QCBS) method set out in the Procurement Regulations.
3.	Guidelines for the expressions of interest

Expressions of Interest should be submitted in one (1) hard copy and a soft copy in PDF format.
In order to ease the evaluation process, it is required that the application documents do not exceed eighty (80) pages written in English language, gathered in one (1) file with a maximum size of 10 MB.
The expression of interest file shall include, at a minimum: 
-	The letter of expression of interest signed by the Applicant or representative of the JV;
-	The copy of the co-contracting (joint venture)agreement (if relevant);
-	The presentation of the main Applicant (legal existence, organizational chart & staff, financial statement/turnover over the last 5 years etc., certificate of non-bankruptcy if available);
-	The relevant past and ongoing references of the Applicant since January 2015 (see “Determination of the similarity of the experiences above”) with brief description (year(s) of implementation, duration of Services, brief description…)
-	A concept note of up to Two (2) pages describing briefly the understanding of the service, its methodology, its organization including articulation of international and local expertise, its recommendations and prerequisites;
-	The signed Statement of Integrity, Eligibility and Social & Environment responsibility (see appendix).

Among the submitted applications, Ethiopian Electric Power will shortlist a maximum of six (6) Applicants, to whom the Request for Proposals to carry out the Services shall be sent
The submittals should be presented in English.
Expressions of interest must be delivered in a written form to the address below in person and by Email no later than December 1, 2025, 4:00 PM local time (Addis Ababa, Ethiopia). Interested Applicants may obtain further information at the same address address below during office hours from Monday to Friday, 8:30 AM to 5:00 PM local time.
The address referred to above is:
Ethiopian Electric Power (EEP), Procurement & Logistics Office
Attn: Eng. Tsion  Birhanu, 
Executive officer, Procurement & Logistics 
Yeka Sub-city, Woreda 09, (Former Kotebe 02)
Infront of Kotebe Metal Tools Factory,
Ethiopian Electric Power Compound, Block Number 09, First Floor, 
Office Number 203
Addis Ababa, Ethiopia
E-mail: tsion.birhanu@eep.com.et, tsionnaod@gmail.com 
Tel: +251115580597
Copy to: Mr. Hussen Adem, Manager, Project Procurement
E-mail:  Hussen.Adem@eep.com.et or hussenadem377@gmail.com
Ms. Weyinshet Dejene, Procurement Officer
E-mail: weyinshetd@gmail.com
Tel: +251115580781
Soft copies documents shall be sent to the email: hussenadem377@gmail.com or weyinshetd@gmail.com. 
Request for clarification have to be sent in a written form exclusively to the Client, not later than ten (10) working days (from Monday to Friday, 8:30 AM to 5:00 PM local time) before submission. Answers will be sent to all potential Applicants having withdrawn the Request for Expression of Interest from DG Market. 
An application that does not meet the above listed requirements will be rejected.
The Statement of Integrity, Eligibility, and Environmental and Social Responsibility form is also available on the DG Market website, attached as an appendix to the Request for Expressions of Interest notice.