开云体育

Pacific Vacancies Announcement No. 2025/85

?

------------------------------------------------------------------------------------------------------------------

?

?

REQUEST FOR PROPOSAL (RFP)

Comprehensive IT Audit

Issued By:?The Micronesia Conservation Trust

Issue Date:?February 19, 2025

Proposal Due Date:?March 05, 2025

Contact:?Lisa Andon Ranahan, Chief Operations Officer

1.?????? Introduction & Background

The Micronesia Conservation Trust seeks proposals from qualified Information Technology (IT) firms to conduct a?comprehensive IT audit?of our organization’s technology infrastructure. This audit aims to assess the effectiveness, security, and efficiency of our IT operations, systems, policies, and data management practices. The audit will provide a?Comprehensive IT Audit Report?identifying vulnerabilities and inefficiencies and a separate?Recommendations Report?suggesting actionable solutions. The recommendations will be used as the foundation for a future RFP for IT improvements and remediation efforts.

The Micronesia Conservation Trust (MCT) is a non-governmental, non-profit organization that serves as a regional financing institution for biodiversity conservation and climate change adaptation and mitigation across the Micronesia region. Our vision is “Enduring Partnerships. Resilient Ecosystems.”? To accomplish this, we make grants and strengthen organizational and leadership capacity to help Micronesian communities and decision-makers conserve the health of the oceans and islands that are our home.?

MCT is an Accredited Entity of the Green Climate Fund and a National Implementing Entity for the Adaptation Fund. Responsible for all financial matters within the organization, the Chief Financial Officer (CFO) will collaborate closely with the Chief Executive Officer and Chief Operations Officer to direct financial policy and direction.? MCT is headquartered in Pohnpei in the Federated States of Micronesia but is in the process of establishing a presence in the Republic of the Marshall Islands, the Republic of Palau, and Guam.? The proposed IT solutions will need to accommodate this expansion.

2.?????? Scope of Work

The selected firm will conduct a thorough evaluation of our IT environment, including but not limited to:

2.1 Analysis of Current IT Structure

·???????? Inventory and Mapping?– A detailed assessment of IT assets, including servers, network infrastructure, workstations, mobile devices, and cloud-based services.

·???????? System Architecture Review?– Evaluation of the organization’s IT architecture, including integration between various systems.

·???????? IT Governance & Policies?– Review IT policies, procedures, and governance structure to ensure alignment with best practices.

2.2 Hardware & Computer Management

·???????? Inventory and lifecycle assessment of all computing devices (desktops, laptops, mobile devices, and peripherals).

·???????? Evaluation of device security, endpoint protection, and management practices.

·???????? Review of hardware replacement and upgrade policies.

2.3 Server & Network Infrastructure

·???????? Assessment of on-premises and cloud-based server environments.

·???????? Network architecture analysis, including firewalls, VPNs, and wireless infrastructure.

·???????? Evaluation of backup and disaster recovery plans.

2.4 Data Security & Information Management

·???????? Map current workflows, including stakeholder roles, tasks, and performance metrics for efficiencies and effectiveness.

·???????? Identify issues faced by stakeholders, focusing on pain points that impact key performance indicators.

·???????? Review of policies and procedures for handling sensitive information.

·???????? Assessment of data encryption, access control, and user authentication measures.

·???????? Identification of vulnerabilities related to data breaches or unauthorized access.

2.5 Centralized Information Systems & Software

·???????? Analysis of enterprise software, databases, and custom applications.

·???????? Assessment of integration between different IT systems.

·???????? Evaluation of software licensing, patch management, and system updates.

2.6 Compliance & Risk Management

·???????? Review of compliance with relevant regulations (e.g., GDPR, HIPAA, NIST, or applicable standards).

·???????? Identification of cybersecurity risks and mitigation strategies.

·???????? Assessment of IT governance policies and best practices.

2.7 IT Support & Operational Efficiency

·???????? Evaluation of IT helpdesk support structure and response times.

·???????? Review of IT staffing, training, and resource allocation.

·???????? Recommendations for improving IT service management and user experience.

3.?????? Deliverables

The selected firm will provide the following:

• Comprehensive IT Audit Report?– A detailed document outlining the current state of IT infrastructure, security vulnerabilities, compliance risks, inefficiencies, and gaps. This report will strictly focus on?identifying issues without suggesting solutions.
• Recommendations Report?– A separate report offering prioritized, actionable recommendations based on the audit findings. This document will serve as the foundation for a future RFP focused on IT improvements and risk mitigation.
• Presentation to Leadership?– A summary presentation of findings and key takeaways to the executive team.
• Remediation Plan (Optional)?– A roadmap outlining a phased approach to implementing recommendations (if required).

4.?????? Proposal Submission Requirements

Interested firms must submit a proposal that includes:

• Company Profile?– Background, qualifications, and experience in IT auditing.
• Approach & Methodology?– Proposed audit process, tools, and frameworks.
• Project Timeline?– Estimated start and completion dates.
• Team & Expertise?– Key personnel, certifications, and relevant experience.
• Pricing Structure?– Breakdown of costs, including any additional fees.
• References?– Past clients and case studies (if available).

5.?????? Evaluation Criteria

Proposals will be evaluated based on:

• Experience and expertise in conducting IT audits.
• Understanding of the scope and methodology proposed.
• Ability to identify risks and provide actionable recommendations.
• Cost-effectiveness and value for the organization.
• References and past performance.

6.?????? Submission Instructions

• Proposals must be submitted by March 5, 2025?to?landon@...
• Questions regarding this RFP may be sent to?Lisa Ranahan Andon?by February 28, 2025
• Late or incomplete proposals will not be considered.

7.?????? ?Terms & Conditions

• MCT reserves the right to accept or reject any proposal.
• The selected firm will be required to sign a confidentiality and non-disclosure agreement.
• This RFP does not commit MCT to any financial obligation until a contract is signed.

?

----------------------------------------------------------------------------------------------------------------

PLEASE NOTE:

?

ECO-CONSULT PACIFIC provides this vacancy announcement to those specialists on our database who have provided us with an email address and who have voluntarily subscribed. Unless otherwise indicated, ECO-CONSULT PACIFIC is not and will not be involved in the selection process, nor in any of the negotiations for the position, and will not claim any charges from the specialists.

The vacancies are obtained from regional and international?organizations, magazines, newspapers and colleagues. Although we will do our best to relate to you the details on the positions as they have been provided to us, it is possible that some information may be incorrect or outdated. ECO-CONSULT PACIFIC advises those interested in a vacancy to contact the advertising organization directly for specific details on the position. ECO-CONSULT PACIFIC will not accept any liability for incorrect information.

Although we have many email recipients for 'Pacific Vacancies', your address will remain confidential. If you do not want to receive the vacancy announcements anymore, please send a blank email to:

[email protected]

Of course, you can always join again later, by sending a blank email message to:?[email protected]

?