For Supply of Conformity Assessment Tools and Training
Country: The Republic of The Gambia
Project Title: Digital Transformation for Africa / Western Africa Regional Digital Integration Program (DTfA/WARDIP SOP1)
Project ID: P176932
Grant No: E2620
IFB NO: WARDIP/C31.1.2/2024/RFQ005
Contract Title: Procurement of Conformity Assessment Tools and Training
Procurement Method: Request for Quotation
The Government of The Gambia has received financing from the International Development Association to implement a Western African Regional Digital Integration Project, and it intends to apply part of the proceeds of this fund for payments under the Contract for the supply of Conformity Assessment Tools and Training.
The Fiduciary Agent Digital Transformation for Africa/Western Africa Regional Digital Integration Project (DTfA/WARDIP) now invites sealed bids from eligible and qualified suppliers for supply of Conformity Assessment Tools and Training as per the attached specifications and Terms of Reference.
Bidding will be conducted through the shopping using Request for Quotation (RFQ) procedures specified in the World Bank’s “Procurement Regulations for IFP Borrowers” (Procurement Regulations) and is open to all bidders as defined in the Procurement Regulations. Interested bidders can request the full quotation via emails (slowe@wardip.gm / adanso@wardip.gm and copy sdrammeh@mocde.gov.gm)
Invited bidders may obtain further information from the Digital Transformation for Africa/Western Africa Regional Digital Integration Project, Ministry of Communication and Digital Economy,Tenengfara Business Complex, Bakau, Kanifing Municipality, The Gambia, from Monday to Thursdays from 8.00 a.m. to 4.00 p.m and on Fridays from 8.00 a.m. to 12.00 p.m.
The Bidder shall furnish documentary evidence of the following requirement(s):
- Proof of executing at least three contracts of similar nature at the tune of US$40,000.00 or above within the past three years
- Registration
Quotations must be delivered to the address below on or before 12.00 p.m. on 10th October, 2024. Late quotations will be rejected. Quotations will be opened in public in the presence of bidders or their representatives who choose at the address below on the 10th October, 2024 at 12:10 pm.
It is expected that the winning supplier would agree with The Project to deliver all the Equipment within Six Month upon signing of the Contract and partial quotations will not be accepted and all bid shall be valid for 21 days. The goods shall be delivered and installed at the DTfA/WARDIP.
The address referred to above is.
Attn: Project Coordinator
Digital Transformation for Africa/ Western Africa Regional Digital Integration Project
C/o Ministry of Communication and Digital Economy
Tenengfara Business Complex
Bakau
Kanifing, The Gambia
Phone: (220) 3600170/7972577 or via
Email: slowe@wardip.gm / adanso@wardip.gm
Yours Sincerely,
Minimum Technical Specifications and Requirements for the Supply of Conformity Assessment Tools and Training:
General:
The Tool offered should be from the manufacturer’s own standard range of production in current supply and conforming as near as possible to the following specifications. The Equipment should be suitable for continuous operation in tropical conditions. Suppliers shall ensure that the equipment offered comply with the stipulated requirements of the law pertaining to the use of the equipment. All items should be fully assembled with all the normal standard fittings and tested ready for immediate use.
Manuals: One copy of the following shall be furnished with the equipment:
- User Manual
- Operations Manual
Warranty: Optional one year warranty with full after sales support services.
No. | Item | Category | Description | Specification | Quantity |
1 | Binwalk | Software/applications | 1.1. A fast and easy-to-use tool for analyzing, | Binwalk version 2.3.4 with: | 1 per user (15 users) |
2 | Kaitai Struct | Software/applications | Kaitai Struct is a declarative language used for describing | i. Declarative Language: YAML-based language to describe the structure of binary files. This allows for clear and concise definitions of complex binary formats. | 1 per user (15 users) |
3 | IDA Pro | Software/applications | IDA Pro is a powerful and versatile tool used for binary code analysis, | IDA Pro version 8.4.240527 | 1 per user (25 users) |
4 | Ghidra | Software/applications | Ghidra is a comprehensive software reverse engineering (SRE) | Ghidra version 11.12 | 1 per user (15 users) |
6 | Universal Chip Micro | Hardware Reverse |
| TSOP MSOP SSOP SMD IC Test Clip pin Socket, Adapter Programmer | 15 |
7 | SOIC8 SOP8 Flash Chip Test | Hardware Reverse | The SOIC8 SOP8 Flash Chip Test Clip is a tool | SOIC8 SOP8 Flash Chip Test | 15 |
8 | Goupchin 10PCS SMD IC Test | Hardware Reverse | The Goupchn 10PCS SMD IC Test Hook Clips are | Goupchin 10PCS SMD IC Test | 15 |
9 | Hook Clips Silicone Jumper Wires | Hardware Reverse | The Jumper Wire Kit with preformed breadboard jumper wires, | Jumper Wire Kit, Preformed Breadboard | 15 |
10 | BeagleBoneBlack (BBB) with complete kit | Hardware Reverse | The BeagleBone Black (BBB) with a complete kit is a versatile development platform | The latest version of the BeagleBone Black (BBB) is the BeagleBone Black Rev C. | 15 |
| |||||
11 | USB to MPSSE Serial cable 3.3v – 0.5m | Hardware Reverse | The USB to MPSSE Serial Cable 3.3V – 0.5m is a versatile tool used | C232HM-DDHSL-0 | 15 |
12 | ScanDisk Adapter with 16G memory card | Hardware Reverse | The SanDisk Adapter with a 16GB memory card is a | for MicroSD, MicroSDHC, MicroSDXC | 15 |
13 | Cable for Rasberry Pai Platform – USB to TTL RS232 | Hardware Reverse | The USB to TTL RS232 Serial Cable for the | TTL-232R-Rpi | 15 |
14 | Magnifier lens | Hardware Reverse | To be used for reading labellings and small component on the PCB | 10X Magnifying Glass, 2.6In Pocket Magnifying Glass w Case, | 15 |
15 | BeagleBoneBlack | Hardware Reverse | JTAG (Joint Test Action Group) for debugging and | SKU 670, | 15 |
16 | Resistors | Hardware Reverse | Basic Electronic Components Resistor: a passive two-terminal electrical device that resists the flow of current. | uxcell Axial Lead 1% Tolerance Metal Film Resistor 0.1 Ohm 2W | 60 |
17 | Power Adapters for BBB | Hardware Reverse | Powering the BBB | AC, DC, MyVolts 5V Power Supply Adapter Compatible with Replacement for | 15 |
18 | Logic Analyzer | Hardware Reverse | Capture and analyze digital signals | 24 MHz BCH, Logic Analyzer Microcontroller, FPGA Debugging Tool 24M | 15 |
19 | USB Hub | Hardware Reverse | For connecting multiple devices | 8 ports | 15 |
20 | Container Kit | Hardware | For keeping in BBB and accessory tools, |
| 15 |
21 | Chanzon 120pcs 10 cm Header | Hardware Reverse Engineering | The Chanzon 120pcs 10 cm Header Jumper Wire Dupont | i. Prototyping and Circuit Building: Breadboard Connections: These jumper wires are ideal for making connections on a breadboard, allowing you to build and test circuits without soldering. | 15 |
22 | Serial to USB Cable | Hardware Reverse Engineering | Used for compatability between | ADAFRUIT Industries 954 USB-to-TTL Serial Cable, Raspberry PI | 15 |
23 | GPS Module | Hardware Reverse Engineering | For embedding GPS capabilities providing TTL and RS-232 | BN-880 GPS Module U8 with Flash HMC5883L Compass | 15 |
24 | CP2102 USB-UART Serial Adapter Module with 4p | Hardware Reverse Engineering | Boundary scan tools for testing | 6 in 1 | 15 |
25 | Multimeter and Analyzer | Hardware Reverse Engineering | Testing current levels s | TRMSS 60000 Counts Volts Meter Ohmmeter Auto–Ranging Tester; | 15 |
26 | Book by Roronoa Hataake | Hardware Reverse Engineering | Maual for Lab analysts | MASTERING EMBEDED SYTE, C PROGRAMMING FOR ARDUINO AND MICROCONTROLLERS: | 15 |
27 | JTAG Connection Cable | Hardware Reverse Engineering | For logic analysis and | 20 pin for ARM Programming ISP IDC – 10 color length | 15 |
28 | USB to Motherboard Header Adapter | Hardware Reverse Engineering | Used for connecting USB devices directly | 6 in USB 2.0 A to USB 4 F/F – USB cable – USB(F) to 4 pin USB 2.0 header (F) | 15 |
29 | Laptop Computers | Hardware Reverse Engineering | For interfacing the BBB, accessories and equipment | 1. Preinstalled Unix and necessary applications for the exercises | 14 |
30 | Deskstop Computer | Hardware Reverse Engineering | To server as a Server in the Lab and for testing and interfacing the BBB, accessories and equipment | 1. Preinstalled Unix and necessary applications for the exercises | 1 |
31 | Soldering machine | Hardware Reverse Engineering | For soldering PCB | Medium size for PCBs and IOT devices | 5 |
II . Purpose and Objectives
The objective of the project is, within two (6) months from the start of the exercise, to:
- Establish trust for individuals and businesses in the usage of digital equipment and services within Critical National Information Infrastructure entities.
- To ensure the security and resiliency of Critical National Information Infrastructure.
- Ensure national accreditation of digital equipment and applications from vulnerabilities and espionage functions.
- To ensure the digital supply chain security within The Gambia is secure and based on internationally recognised standards and best practices.
- To build local capacity in audit and accreditation of digital products and services.
- Methodology, Approach and Scope of Work
The methodology of the Project will comprise of 2 Stages:
Stage 1: Situational Analysis
This stage will involve reviewing the list of the Build of Quantities (BoQ) and come up with a revised High-level and Low-level design for consideration and finalization. This stage will also assess the feasibility of expanding the usage of the tools beyond the public sector and recommend steps to achieve the establishment of the Cybersecurity Conformity Assessment Lab. The situational analysis should also consider the current cybersecurity policies, practices, and any existing tools being used. This stage will also involve vetting personnel (as per their skillsets and knowledge on low-level programming on C and C++, Assembly Languages, and mathematics and theory of computations, among similar topics) selected for the training and identify capacity gaps as per the assignment.
Stage 2: Supply of Tools
This stage will involve procuring the necessary software and hardware tools to conduct the conformity assessment of digital equipment and applications of Critical National Information Infrastructure. The approved BOQ from Stage 1 would be procured and supplied within one (1) month. The Preliminary BOQ is in Annex A of this TOR.
Stage 3: Training of selected Personnel from Government
In coordination with the Ministry of Communications and Digital Economy (MOCDE), Gambia ICT Agency (GICTA), Gambia Computer Incident and Response Team (GmCSIRT) and the University of The Gambia (GoTG), the Consultant shall recommend, and vet selected for the training exercise. A minimum of 15 people will be trained of which 5 will be interns already studying Computer Science at the University of The Gambia. The training modules will touch on but not limited to the following areas:
- Hardware Aspects:
- Understanding all BBB board components and related functions
- UART serial connections for each related task
- JTAG connections for each related task
- Reading information with connectors between semiconductors/microprocessors
- Software Aspects:
- Introduction to reverse engineering
- Operating System
- Assembly Code
- Binary Reversing Tools
- Software Vulnerabilities
- Malware Reversing
- Anti-reversing
- Reversing Java Bytecode
- Dynamic Analysis
- Reversing Source Code
- Program Understanding
- Hands-on exercises with Reversing Tools (IDA Pro, etc.)
- Understanding ROM –Uboot-Kernel boot process on Linux-ARM systems and Testing
- Kernel, Bootloaders compilations Step-by-Step and testing on Beaglebone Hardware
- U-Boot, MLO, SPL, explanation and Testing
- Understanding various sub systems of AM335x SOC such as GPIOs, I2C, MMC, boot modes ,etc
- Understanding platform devices and how it works
- Understanding ARM-board configuration files
- Linux device Tree
- Understating various boot modes of AM335x
- eMMC OS updating and booting new Debian OS
- Serial booting (UART)
- TFTP booting
- NFS booting
- Beaglebone Networking
- Busybox compilations and Testing
- Configuring and using Buildroot on Beablebone
- Writing uEnv dot txt from scratch and Testing
- Using I2C tools on BBB
- Hardware interfacing projects and ‘C’ application development using Eclipse IDE
- GPIO programming
- Interfacing external LEDs, 7 segment displays and code development
- Interfacing LCD and related projects
- Interfacing MPU6050 sensor and tilt sensing
- EEPROM programming
Stage 4: Submission of Training materials and Report
This stage will involve submitting all training documentations (contents to be developed based on but not limited to section: Stage 3, B and C) and other tools used in the training as well as the Project completion report.
Bid Validity Period is: 21 days from the date of bid submission
Payment Terms and Condition shall be: 100% of the total contract sum will be paid after all the goods are delivered and accepted by the project together with payment request and good delivery note.
Performance Security: Not Applicable
Delivery Period is: Six months weeks from the effectiveness date of delivery after of contract signing.