End-to-End Implementation and ISO/IEC Certification of NTC Data Centers

The National Telecommunication Corporation (NTC) Islamabad invites bids for the hiring of a firm for the end-to-end implementation and ISO/IEC certification of its Data Centers. This procurement is specifically for comprehensive advisory, implementation, and certification services aligned with ISO/IEC standards including 27001:2022, 27005:2022, 27017:2015, 27018:2025, 31000:2018, and 22301:2019. The scope covers cloud service provision and Telecom NOC operations. Items being procured: - Risk Assessment of Telecom NOC & Data Centers for ISO-27001:2022 - GAP Analysis of ISO-27001:2022 (enhanced scope for Cloud Services and Telecom NOC), ISO-27017:2015, ISO-27018:2025, ISO-27005:2022, ISO-31000:2018, ISO-22301:2019 with reports and remedies - Stage 1 reports & corrective actions - Implementation plan for stage 1 certifications, internal audit and remedial actions - Certification readiness and complete documentation - Engagement of accredited certification bodies for final ISO audit - Support for certification process until successful completion - Award of final ISO certification - Local certification training for 20 individuals on ISO/IEC 27017, 27018, 27005, 31000, 22301 - Accredited certification preparation, training and exam for 10 individuals for ISO-27001:2022 Lead Auditor/Lead Implementer - On-prem Risk Assessment, BIA, BC & DR training for operational staff (one week) - On-prem Risk Assessment, BIA, BC & DR awareness session for management (one day) - Training and awareness material (soft & hard) - Optional: Provision of GRC Automation Tool compatible with DR backup (10 users) The technical scope includes a comprehensive review of existing governance, policies, controls, infrastructure, and operational practices. The contractor will provide gap assessments, internal audits, management reviews, certification readiness, and support including appointment of an external accredited certification body. Deliverables include detailed reports, documentation, training materials, and certification support. The optional GRC Automation Tool requires on-premises deployment with a three-year SLA. Eligibility criteria require firms to be registered with active Income Tax and operative Sales Tax status, with relevant ISO certification experience in IT & Telecom organizations, minimum four certifications, and qualified human resources including ISO/IEC 27001 Lead Auditor, CISSP, and CISM certified personnel. Firms must have an average annual turnover of at least PKR 30 million and provide a judicial undertaking regarding blacklisting and ownership links. The bid submission deadline is **July 20, 2026** by 10:00 AM via EPADS only; manual bids will not be accepted. The bid opening will be on the same day at 10:30 AM at NTC HQ Islamabad. Tender security of PKR 200,000 is required. Bidders must submit all required documents including BOQ, commercial compliance, and valid tender security. The contract completion timeline is 15 to 17 weeks from signing. A practical tip for bidders: Ensure your bid documents are complete and compliant with all qualification criteria and submit the original bid security to the NTC Procurement Office before the deadline to avoid disqualification. Early preparation and thorough documentation will improve your chances of success. This tender is a significant opportunity for firms specializing in ISO certification and IT security services to work with a premier government telecom entity in Islamabad.