Cyber Security Services for Ministry of Foreign Affairs Islamabad

The Ministry of Foreign Affairs (Ministry of Foreign Affairs (MOFA)) Islamabad invites bids for provision of Cyber Security Services under a National Single Stage-Two Envelope procurement method. This contract is for Managed Cyber Security Services comprising an On-Site Governance, Risk and Compliance (GRC) Team embedded at Ministry premises as the primary delivery mechanism for the Ministry's Cyber Security program. Items being procured: - GRC Lead with minimum 12 years IT and information security experience and relevant certifications - GRC Analyst/Pentester with minimum 4 years IT and information security experience and relevant certifications - Internal Auditor with minimum 8 years IT and information security experience and relevant certifications The scope includes development and implementation of cybersecurity policies aligned with Pakistan Information Security Framework (PISF), enterprise risk assessment, SOP drafting, regulatory compliance monitoring, third-party risk management, asset inventory and classification, internal audits, vulnerability assessments, penetration testing, and remediation. All resources must be physically present at Ministry premises during contracted hours. Knowledge transfer and mentoring to Ministry IT staff is a continuous requirement. Eligibility requires firms to be Pakistan-registered with active NTN and sales tax registration, minimum 5 years of cyber security or GRC services experience, ISO 27001 certification, nCERT accreditation (CAT A), and no conflict of interest with the Ministry. Bidders must submit bids through EPADS v2.0 portal by the deadline. The bid submission deadline is **Monday, October 5, 2026 11:30 AM** with bid opening at 12:00 PM the same day. Bids must be submitted online; manual submissions are not accepted. The contract will be awarded based on Quality and Cost Based Selection (QCBS) technique. The contract is for the financial year 2026-27 with expected commencement on October 30, 2026. Bidders should ensure compliance with all bid security and documentation requirements. A practical tip for bidders is to register early on EPADS v2.0 and carefully review the detailed eligibility and technical criteria to avoid disqualification. The Ministry reserves the right to accept or reject any or all bids without liability. Contact details for queries and bid security submission: Deputy Director, Ministry of Foreign Affairs, Constitution Avenue, Sector G-5, Islamabad. Phone: +92-347-725-9108, Email: adgs.sykb@mofa.gov.pk.