
2/24
دولة فلسطين
Country : West Bank and Gaza
Palestinian Energy & Natural Resources Authority
سلطة الطاقة والموارد الطبيعية الفلسطينية
REQUEST FOR EXPRESSIONS OF INTEREST ( CONSULTING SERVICES - FIRMS SELECTION )
Project Name : Phase 3 Advancing Sustainability in Performance , Infrastructure , and Reliability of the Energy Sector in the West Bank and Gaza
Grant No .: P507260
Assignment Title : Sector - Wide Cybersecurity , Business Continuity , Framework & Policy Development
Reference No .: GZ - PENRA - 530256 - CS - QCBS
The Palestine Liberation Organization has received financing from the World Bank toward the cost of Phase 3 Advancing Sustainability in Performance , Infrastructure , and Reliability of the Energy Sector in the West Bank and Gaza ( ASPIRE III ) and intends to apply part of the proceeds for consulting services .
The consulting services ( " the Services " ) include consultancy service for Sector - Wide Cybersecurity , Business Continuity , Framework & Policy Development . The expected implementation period is six ( 6 ) months .
The detailed Terms of Reference ( TOR ) for the assignment can be obtained from the address and /
or the electronic websites given below :
Attention : Procurement Officer
Al Masayef . PENRA Building / 4th floor
City : Ramallah
Telephone : +9722 2984752 , or +970 2 2984752
Facsimile number : +9722 2984753 or +970 2 2984753
Electronic mail address : procurement@menr.org
Higher Council for Public Procurement Policies ' electronic website : https://www.shiraa.gov.ps The Palestinian Energy & Natural Resources Authority now invites eligible consulting firms ( " Consultants " ) to indicate their interest in providing the Services . Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services . The shortlisting criteria are :
1. Relevant Sector Experience
The Firm must have demonstrated experience delivering :
* Cybersecurity frameworks and governance models
* OT / ICS cybersecurity programs and assessments ( IEC 62443 aligned )
* BCM / DR frameworks and crisis management structures
* Policy development and harmonization across multiple entities
* Sector - wide or national - level cybersecurity initiatives
Minimum Requirement :
At least two ( 2 ) similar assignments in the utility , energy , critical infrastructure , or public - sector domain within the past seven years .
2. OT / ICS ( IEC 62443 ) Expertise
The Firm must have proven experience with :
* OT governance and lifecycle management
* ICS / SCADA assessments , substations , PLC / RTU , historian systems
* Zones & conduits architecture ( IEC 624432-3- )
* OT risk assessment methodologies
* OT - specific policy development
Minimum Requirement :
At least one major project involving IEC 62443 implementation or OT / ICS cybersecurity .
3. Information Security Framework Expertise
The Firm must demonstrate proficiency in developing and aligning frameworks with :
* NIST Cybersecurity Framework ( CSF )
* ISO / IEC 27001 : 2022
* ISO 22301 ( BCM / DR )
* SIEM / SOAR governance and SOC operations
Requirement :
Ability to harmonize multiple standards into a unified sector - wide approach . 4. Policy and Governance Development Capability
The Firm must demonstrate capacity to develop :
* Comprehensive cybersecurity and SOC policies * OT / ICS - specific policy suites
* BCM / DR governance policies
* Sector - wide governance models and RACI matrices Requirement :
Evidence of high - quality , bilingual ( Arabic and English ) policy outputs . 5. Regional and Institutional Knowledge Experience working with :
* Utilities or energy sectors in the Middle East region
* Governmental , regulatory , or donor - funded institutions
* Multi - stakeholder or cross - entity coordination environments Advantage ( Preferred , not mandatory ) :
Demonstrated familiarity with Palestinian sector dynamics .
6. Multidisciplinary Team Capacity
The Firm must be able to deploy a team with combined expertise in : Cybersecurity governance
* OT / ICS security
* BCM / DR
* SOC architecture and SIEM / SOAR
* Policy drafting and documentation
* Project management and stakeholder engagement
Requirement :
Ability to support a 6 - month assignment with dedicated resources .
7. Quality Assurance & Methodology
The Firm must demonstrate :
* Documented internal QA / QC processes
8. Clear methodology for reviews , version control , and stakeholder alignment
* Ability to ensure consistency across large , multi - document deliverable packages
9. Financial and Administrative Capacity
The Firm must demonstrate the administrative capability and financial stability needed to manage
a multi - entity project of this scale .
Requirement :
Audited financial statements for at least two years .
Key Experts will not be evaluated at the shortlisting stage .
The attention of interested Consultants is drawn to Section III , paragraphs , 3.14 , 3.16 , and 3.17 of the World Bank's " Procurement Regulations for IPF Borrowers " dated February 2025 , sixth edition ( " Procurement Regulations " ) , setting forth the World Bank's policy on conflict of interest . Consultants may associate with other firms to enhance their qualifications , but should indicate clearly whether the association is in the form of a joint venture and / or a sub - consultancy . In the case of a joint venture , all the partners in the joint venture shall be jointly and severally liable for the entire contract , if selected .
A Consultant will be selected in accordance with the Quality and Cost based Selection ( QCBS ) method set out in the Procurement Regulations .
Further information can be obtained at the address below during office hours 9:00 a.m. - 2 : 00 p.m. ( Palestine local time ) .
Expressions of interest must be delivered in a written form to the address below in person , by March 16 , 2026 at 12:00 pm ( Local Time ) .
Attention : Procurement Officer
Al Masayef . - PENRA Building / 4th floor
City : Ramallah
Telephone : +9722 2984752 , or +970 2 2984752
Facsimile number : +9722 2984753 or +970 2 2984753 Electronic mail address : procurement@menr.org
Higher Council for Public Procurement Policies ' electronic website : https://www.shiraa.gov.ps
