Consulting for the evaluation, implementation and comprehensive management of information security in the health sector
Opportunity details
El SalvadorDescription
El Salvador, through the Ministry of Health (MINSAL), has financing from the Inter-American Development Bank (IDB) for the "Smart and Comprehensive Health Program". This call invites eligible consulting firms to submit their expressions of interest for the evaluation, implementation and comprehensive management of cybersecurity in the digital platform of the health sector.
Scope of the consultancy
Main objective: To design and implement a comprehensive regulatory and cybersecurity framework aligned with international best practices to protect the critical infrastructure and digital platform of MINSAL (Integrated Health System, clinical records and laboratory network) against threats such as ransomware and unauthorized access.
Methodological phases of execution:
Phase I: Assessment, maturity diagnosis and mapping of critical risks.
Phase II: Design of the strategic and documentary framework on cybersecurity architecture.
Phase III: Technical assistance plan and sustainable transfer of knowledge and methodologies to institutional staff.
Qualification and Experience Requirements
Certifications and infrastructure of the firm: ISO 27001 certification and possession of its own Security Operations Center (SOC) or, failing that, reliable documentary support of the successful implementation of SIEM solutions in previous clients.
Verifiable technical experience: Projects executed between 2023 and 2025 in cybersecurity, risk diagnosis and implementation of SIEM in the public, private or health sectors (accrediting at least two detailed references with complete contact details and summary of activities).
Competencies of the consulting team: Mastery in security audits, risk analysis, penetration testing (pentesting), network management, operating systems (Windows Server and Linux: Ubuntu, RHEL, CentOS), edge equipment (Firewall, IDS, IPS, EDR, XDR) and auditing tools (open-source and licensed such as OpenVAS, Nmap, OSSEC, Wazuh, Metasploit).
Proposal selection and management
Regulatory framework: Selection made under the IDB's Consulting Policies for the integration of a short list of between five (5) and eight (8) eligible firms.
Modalities of participation: The application of firms is allowed individually, in association (Joint Venture / APCA) or through the inclusion of sub-consultants.
Delivery method: Submission of expressions of interest in physical printed format (electronic bids are not allowed).
Note: Tender documents and annexes are available in the official language of the country.
More from El Salvador
Provision of equipment, appliances and kitchen utensils for educational centers
Contracting of works for the construction of the expanded passenger terminal with criteria of sustainability, universal accessibility for PwDs and infrastructure that facilitates the mobility of care
Construction of works for the improvement of the drinking water and collective sanitation system in Canton Llano Los Patos, Playa Las Tunas, Playa Torola, El Canoguero, Playas Negras, Playa Blanca, Playa El Jagüey, El Tamarindo, district of Conchagua
Acquisition of automated pathology equipment for MINSAL care center
More in Technology
Consulting for sizing energy storage systems in the power system of Honduras
Consultancy for the improvement of online procedures: interaction between competent professional and manager, and change of competent professional or owner
Data Governance and Digital Platform Consultancy
Development for the management of the registration of professionals and the qualification of health establishments