Consultancy Services for the Implementation of a BCMS for the Global Fund in Conformity to the ISO-22301 Standard

The Global Fund to Fight AIDS, Tuberculosis and Malaria (the “Global Fund”) relies on information and information systems to supports its daily operations and help fulfil its mandate. Access to relevant, up-to-date information and the ability to share and collaborate across a geographically dispersed organization is critical to Global Fund. Effective and proactive information risk management is essential given the ever-changing cyber security threat landscape. In 2019, The Global Fund secured ISO/IEC 27001:2013 certification for its Treasury cash payments data and processes, as well as all the related IT operational management processes and facilities of its offices in Geneva. In 2020, the Secretariat is expanding the scope of its certification to cover its Office of the Inspector General (OIG) and Ethics Office. In line with this expanded scope, the Secretariat seeks to implement a business continuity management system in conformity to the ISO- 23301 Standard. Heading into 2021, the Global Fund intends for its BCMS to cover major business processes including grant management and program finance. An ISO 22301 Contractor is required to conduct a business impact analysis, develop recovery strategies, structure business continuity plans for in-scope business units, and develop and help conduct a test and exercise program ahead of Stage I and Stage II ISO 22301 audits scheduled for the fourth quarter of 2020, and also to t set the stage for an expanded ISO 22301 scope in 2021.

This engagement will be carried out on behalf of Global Fund and will report exclusively to BCMS Manager.

The Contractor is expected to possess experience working with similar organizations and in-depth knowledge of the ISO 22301 standard to enable the Global Fund to maintain and strengthen its BCMS to receive certification by a lead auditor. In addition, the implementation of a BCMS must effectively address business continuity requirements specific to the Global Fund, namely coverage of key business processes and custodians as defined in the organization’s performance and accountability framework.

Download Request for Proposal in English