Data Protection Consultant

1. Background, Objectives and Justification

The Institute for War & Peace Reporting (IWPR) is an independent not-for profit organisation that works with media and civil society to promote positive change in conflict zones, closed societies, and countries in transition around the world. As part of its program activities, IWPR, in partnership with the Global Network of Women Peacebuilders (GNWP), is implementing its initiative Building Resilience in the Eastern Neighbourhood (BREN), which is supported by the UK Government’s Integrated Security Fund (ISF).

IWPR’s BREN program seeks to strengthen the resilience of non-state actors, including marginalised communities, and enhance their ability to deliver transformative, inclusive, and sustainable contributions to peace, stability and security in Armenia, Azerbaijan, Georgia, and Moldova.

Civil society organisations (CSOs) in Armenia, Georgia, Moldova and Azerbaijan face a range of challenges and threats to their work. Various research carried out with the support of ISF (including BREN’s own research) indicates CSOs in the region are especially vulnerable to cyber-attacks, including data breaches and theft, due to lack of cyber security threat awareness and protective measures, amongst other reasons.

Already at heightened risk of cyber attacks due to Russia’s invasion of Ukraine, Moldova faces exacerbating circumstances in the immediate term with the occurrence of significant events, including elections in the fall. 

Building on IWPR’s previous activities involving this subject matter, IWPR is seeking a local expert consultant in Moldova to support strengthening data, information, and communications security practices among up to 8 CSOs. The activity’s objective is to strengthen the CSOs’ data security and communications practices to protect sensitive information from internal and external unauthorized access and usage.

All trainers and mentors must speak Romanian and working knowledge of Russian. The services are scheduled to be delivered over four-months, running from 1 July 2024 to 15 November 2024. 

2. Scope of Work 

The Consultant will support implementation of data, information, and communications security strategy, policies, and procedures based on best practices among participating CSOs, as follows:

1) Provide one hybrid in-person/remote half-day training on data, communications and information security best practices. (Up to 8 CSOs are eligible to participate in the training. Each CSO may send up to 2 participants, for a total number of 16 training beneficiaries). Some CSOs are located outside of the city and will not be able to attend in person, so the training must be offered online with two-way engagement);

2) Conduct an audit of the participating CSOs’ data, communications, and information security practices, identifying weaknesses. (Up to 8 CSOs are eligible to participate in the audit); 

3) Collaborate with the CSO to develop a data, communications and information security strategy, policies and procedures, and corrective action plan, as needed, based on best practices (Up to 8 CSOs are eligible to participate in this activity);

4) Mentor the CSO as it implements the plan. Each CSO may receive up to 4 hours of mentoring during the project period. Up to 8 CSOs are eligible to participate in this activity. Mentoring hours must not exceed a maximum of 32 hours total for all CSOs combined.

3. Main Deliverables and Timeline 

4. Budget

Please submit a budget for IWPR’s review. 

• The budget should include all project-specific costs and expenses, including trainer and mentor fees, travel, etc. Consultant fees should be expressed in terms of an hourly or day rate, as applicable.
• The Consultant does notneed to include logistical costs related to providing the in-person training, e.g. venue, catering, teleconferencing set up. IWPR will directly coordinate and fund such logistics.

5. Payment Schedule

The consultant will invoice for services rendered based on the Milestones identified in the table above.

6. Work Relationships

The Consultant shall report to and work directly with the BREN Capacity Building Manager. The Consultant will also work with IWPR’s respective country coordinators in each country.

7. Application and Evaluation Process

The Consultant should submit the following to vonda@iwpr.net by no later than June 14, 2024:

• Proposed work plan, including sample training agenda and topics and training plan and schedule.
• Description of the organization or trainers/mentors and their respective experience and capabilities related to subject matter of this ToR. 
• CVs of all proposed trainers and/or mentors. 
• Itemized budget for all costs and fees based on the chart in item 3 above (detailed costs in British Pound Sterling (GBP £), with applicable Tax/Charges clearly identified, and provided against each of the categories of services described in the chart.)
• Contact name, email address, and telephone number to facilitate communication between IWPR and the Consultant.

 Applications will be evaluated based on the following criteria:

Experience – 30 points: Ability to deliver all the requirements required by IWPR 

Price – 30   points: Value for money

Technical- 40 points: Responsiveness to the ToR specifications and requirements.