Data Protection Consultant

Data and Communications Security Consultant


Title of Assignment

Data Protection Consultant




From: July 1, 2024

To: November 15, 2024

Application Deadline

June 28, 2024



1. Background, Objectives and Justification

The Institute for War & Peace Reporting (IWPR) is an independent not-for profit organisation that works with media and civil society to promote positive change in conflict zones, closed societies, and countries in transition around the world. As part of its program activities, IWPR, in partnership with the Global Network of Women Peacebuilders (GNWP), is implementing its initiative Building Resilience in the Eastern Neighbourhood (BREN), which is supported by the UK Government’s Integrated Security Fund (ISF).

IWPR’s BREN program seeks to strengthen the resilience of non-state actors, including marginalised communities, and enhance their ability to deliver transformative, inclusive, and sustainable contributions to peace, stability and security in Armenia, Azerbaijan, Georgia, and Moldova.

Civil society organisations (CSOs) in Armenia, Georgia, Moldova and Azerbaijan face a range of challenges and threats to their work. Various research carried out with the support of ISF (including BREN’s own research) indicates CSOs in the region are especially vulnerable to cyber-attacks, including data breaches and theft, due to lack of cyber security threat awareness and protective measures, amongst other reasons.

Already at heightened risk of cyber attacks due to Russia’s invasion of Ukraine, Moldova faces exacerbating circumstances in the immediate term with the occurrence of significant events, including elections in the fall. 

Building on IWPR’s previous activities involving this subject matter, IWPR is seeking a local expert consultant in Moldova to support strengthening data, information, and communications security practices among up to 8 CSOs. The activity’s objective is to strengthen the CSOs’ data security and communications practices to protect sensitive information from internal and external unauthorized access and usage.

All trainers and mentors must speak Romanian and working knowledge of Russian. The services are scheduled to be delivered over four-months, running from 1 July 2024 to 15 November 2024. 

2. Scope of Work 

The Consultant will support implementation of data, information, and communications security strategy, policies, and procedures based on best practices among participating CSOs, as follows:

1) Provide one hybrid in-person/remote half-day training on data, communications and information security best practices. (Up to 8 CSOs are eligible to participate in the training. Each CSO may send up to 2 participants, for a total number of 16 training beneficiaries). Some CSOs are located outside of the city and will not be able to attend in person, so the training must be offered online with two-way engagement);

2) Conduct an audit of the participating CSOs’ data, communications, and information security practices, identifying weaknesses. (Up to 8 CSOs are eligible to participate in the audit); 

3) Collaborate with the CSO to develop a data, communications and information security strategy, policies and procedures, and corrective action plan, as needed, based on best practices (Up to 8 CSOs are eligible to participate in this activity);

4) Mentor the CSO as it implements the plan. Each CSO may receive up to 4 hours of mentoring during the project period. Up to 8 CSOs are eligible to participate in this activity. Mentoring hours must not exceed a maximum of 32 hours total for all CSOs combined.

3. Main Deliverables and Timeline 





Payment upon deliverables approval

1) In consultation with IWPR, finalize the detailed workplan and develop the monitoring, evaluation and learning (MEL) framework for the project.

1 week: 

July 2024

At Milestone 1 below

2) Conduct 1 half-day hybrid (in-person with remote option) training on data, communications and information security. (Up to 16 CSO representatives attending).

½ day: July 2024

Milestone 1: After the training is conducted and submission of the required invoice.

3) Conduct data, communications and information security audit of each participating CSO (up to 8 CSOs).

July-August 2024

At Milestone 2 below.

4) Develop data, communications and information security strategy and corrective action plan, as needed, with each participating CSO based on best practices

September-October 2024

Milestone 2: After the plans are delivered to the CSOs and submission of the required invoice.

5) Mentor each participating CSO with implementation of the strategy and corrective action plan (up to 4 hours of mentoring per CSO). Mentoring hours must not exceed a maximum of 32 hours total for all CSOs combined.

September-October 2024.

At Final Payment below.

6) Prepare MEL report and submit to IWPR.

Due November 15, 2024

Final Payment: After delivery of the MEL report and submission of the required invoice.



4. Budget

Please submit a budget for IWPR’s review. 

  • The budget should include all project-specific costs and expenses, including trainer and mentor fees, travel, etc. Consultant fees should be expressed in terms of an hourly or day rate, as applicable.
  • The Consultant does notneed to include logistical costs related to providing the in-person training, e.g. venue, catering, teleconferencing set up. IWPR will directly coordinate and fund such logistics.

5. Payment Schedule


The consultant will invoice for services rendered based on the Milestones identified in the table above.

6. Work Relationships

The Consultant shall report to and work directly with the BREN Capacity Building Manager. The Consultant will also work with IWPR’s respective country coordinators in each country.

7. Application and Evaluation Process

The Consultant should submit the following to by no later than June 14, 2024:

  • Proposed work plan, including sample training agenda and topics and training plan and schedule.
  • Description of the organization or trainers/mentors and their respective experience and capabilities related to subject matter of this ToR. 
  • CVs of all proposed trainers and/or mentors. 
  • Itemized budget for all costs and fees based on the chart in item 3 above (detailed costs in British Pound Sterling (GBP £), with applicable Tax/Charges clearly identified, and provided against each of the categories of services described in the chart.)
  • Contact name, email address, and telephone number to facilitate communication between IWPR and the Consultant.

 Applications will be evaluated based on the following criteria:

Experience – 30 points: Ability to deliver all the requirements required by IWPR 

Price – 30   points: Value for money

Technical- 40 points: Responsiveness to the ToR specifications and requirements. 

Evaluation criteria

Evaluation sub-criteria


Max points

Experience (30 points

Organisational and/or individual experience 

Experience in the subject matter of the ToR; prior work with CSOs; personnel and/or organisational resources are adequate and appropriate to implement the ToRs activities



Price (30 points)

Budget reasonableness

Completeness of budget; all budget items are necessary and appropriate; price reasonableness; value for money?



Technical (40 points)

Proposal/Work Plan

Does the proposal clearly explain, understand and respond to the requirements as stated in the Terms of Reference?