System Audit of Geographic Information System (GIS)

Sui Northern Gas Pipelines Limited (SNGPL), headquartered in Lahore, Punjab, is procuring professional services for a comprehensive system audit of its Geographic Information System (GIS). This tender specifically targets firms capable of conducting an enterprise-level system audit focusing on GIS architecture, cybersecurity risk assessment, and operational efficiency. The scope includes reviewing GIS system architecture, security controls, scalability, governance, and compliance with industry standards such as ISO 27001 and ESRI best practices. The audit will assess hardware, software, network integration, data management, access control, and cybersecurity vulnerabilities. The firm will evaluate system performance, scalability, and governance mechanisms, including policies, SOPs, and risk management. Deliverables include a detailed audit report, a roadmap for future enhancements, and a presentation to SNGPL management. The contract duration is eight weeks with interim progress reports every two weeks. Eligible bidders must have at least five years of experience in system audits, with a minimum of two similar projects completed in the last five years, including one for a government or utility sector. Firms must possess ISO 27001 certification, demonstrate proficiency with security tools like Nessus, Burp Suite, and Metasploit Pro, and have certified personnel holding OSCP or equivalent credentials. Valid NTN and Professional Tax registration are mandatory. The tender follows a Single Stage Two Envelope procedure. Bidders must submit technical and financial bids separately, including Earnest Money (Bid Bond), audited financial statements for the last two fiscal years, CVs of key staff, and a signed Non-Disclosure Agreement. The submission deadline is strictly by 23:59:59 on January 7, 2025, at the Gas House, 21-Kashmir Road, Lahore. A practical tip for bidders: ensure all technical documents are thoroughly completed and signed on each page to avoid disqualification. Pay special attention to the Earnest Money submission and compliance with all mandatory requirements to be considered technically responsive. Early submission is advised to accommodate any unforeseen delays and to allow time for clarifications if requested by SNGPL.