Duties, responsibilities and expected results

The selected consultant(s) will work closely with the EaP CSF Secretariat to:

• Do an inventory of the hardware and software systems in use in the organisation and categorise them;
• Examine and evaluate the organisation’s information technology infrastructure (including both hardware and software assets), policies, operations;
• Observe the efficiency and efficacy of the personnel in using existing software and hardware assets (i.e. including skills, availability to learn new skills, data management);
• Conduct a risk assessment to review the nature and extent of IT-related risks that affect or may affect the organisation (i.e. password management, firewall security, user rights to access different types of information, physical and remote access to server/ hardware, etc.)
• Review the organisation’s GDPR compliance (i.e. data collection and storage, cookie policy);

Deliverables:

• IT audit methodology describing the methods that will be used during the audit and walkthroughs on the clearly defined audit area;
• Audit report including recommendations and risk management matrix;

Timeline

Recruitment phase

• Launch of the call for applications: September 1, 2020
• Applications deadline: September 25, 2020
• Selection: October 1, 2020
• Signature of the contract with the selected consultant: by October 10, 2020

Research phase

• Presentation of the methodology: by October 20
• Rapid assessment of the current EaP CSF assets, practices and policies: by November 10, 2020

Reporting phase

• Final report: November 30, 2020

Expected workload: 15 working days

Location of the assignment: home-based

The current assignment does not involve travelling to the Eastern Partnership Countries.