In terms of Rules 48 of Public Procurement Rules, 2004 Grievance Redressal Committee (GRC) is notified for the subject procurement and notification copy is available on the procuring agency’s website and also available on EPADS v2.0 as well as Authority’s website at (www.ppra.org.pk).
Private Power & Infrastructure Board (Private Power & Infrastructure Board (PPIB)), Deputy Director
Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1, Islamabad Capital Territory
+92-333-051-1845
saqib@ppib.gov.pk
The following specific data for the procurement of Consultancy Services to be procured shall complement, supplement, or amend the provisions in the Instructions to Bidders (ITB). Whenever there is a conflict, the provisions herein shall prevail over those in ITB.
BDS Clause Number
ITB Number
Amendments of, and Supplements to, Clauses in the Instruction to Bidders
1
1.1
Name of Procuring Agency: Private Power & Infrastructure Board (Private Power & Infrastructure Board (PPIB))
The subject of procurement is: Procurement /RFP for Consultancy Services for Implementation of ISO/IEC 27001:2022 Assessment, IT Policy Review and Audit
Financial year for the operations of the Procuring Agency: 2026-27
Name and identification number of the Contract: P48860
BDS Clause Number 2
ITB Number 1.2 & 9.1
The Bidders may seek clarifications through EPADS v2.0: Clarification Date: Thursday, June 25, 2026
Pre-Bid Meeting: Tuesday, June 23, 2026 11:00 AM
Venue: Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1
BDS Clause Number 3
ITB Number 4.1
The language of the proposals is: English
BDS Clause Number 4
ITB Number 6.1
Participation of Sub-consultants, Key Experts and Non-Key Experts in more than one Proposal is permissible? No
BDS Clause Number 6
ITB Number 7.1
Proposals shall be valid until 120 Days
BDS Clause Number 7
ITB Number 9.1
List of documents required along with the bid:
Detailed Proposal with company profile containing required informationCover letter containing title/subject, address, fax, email and contact numbers and name, addresses of authorized personBDS Clause Number 8
ITB Number 10.2
The Consultant’s Proposal must include the minimum Key Experts’ time-input of __________person-months.
For the evaluation and comparison of Proposals only: if a Proposal includes less than the required minimum time-input, the missing time-input (expressed in person-month) is calculated as follows:
The missing time-input is multiplied by the highest remuneration rate for a Key Expert in the Consultant’s Proposal and added to the total remuneration amount. Proposals that quoted higher than the required minimum of time-input will not be adjusted. ]
BDS Clause Number 9
ITB Number 105
The price shall be Fixed.
Price schedule will be provided according to the format defined and acquired. see section price schedule.
BDS Clause Number 10
ITB Number 11.1
The qualification criteria to establish the supply / production capability of the bidder.
see Eligibility Criteria
BDS Clause Number 11
ITB Number 7.6
Services and Their related documents:
See section Required Services and ToR
BDS Clause Number 12
ITB Number 8.1 & 8.2
The amount of Bid Security shall be as defined in Bid Security Section for items and lots given in BDS 6
The Bid Security shall be in the form of: Pay Order, Demand Draft
BDS Clause Number 13
ITB Number 13.1
Currency of the Bids shall be : PKR
BDS Clause Number 14
ITB Number 14.1
Proposal shall be submitted online on EPADS v2.0 whereas hard copy of the bid security should be submitted to the following;
Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1, Islamabad Capital Territory
Bids that are not submitted on EPADS v2.0 shall be disqualified.
The deadline for Bids submission is: Tuesday, June 30, 2026 12:00 PM
BDS Clause Number 15
ITB Number 15.1
The Bids opening shall take place on EPADS v2.0.
Day : Tuesday
Date: Tuesday, June 30, 2026
Time : 12:30 PM
BDS Clause Number 16
ITB Number 20
Selection technique adopted will be: Quality and Cost Based Selection (QCBS)
see Evaluation Criteria
BDS Clause Number 18
ITB Number 21.5
The Performance guarantee shall: 8.00%.
The Performance Guarantee shall be acceptable in the form of: Pay Order, Demand Draft
BDS Clause Number 19
ITB Number 24.1
Grievence against this procurement shall be submitted online on EPADS v2.0.
| Bidder's Type | Required Registration |
|---|---|
|
Any |
NADRA CITIZENSHIP (CNIC/NICOP) FBR (NTN) FBR (GSTN) SECP |
| Eligibility Criteria | Document |
|---|---|
| Company profile ,date of establishment and organizational structure , Copy of documents regarding affiliation with foreign or local company etc. Lead Auditor/Implementer must be a certified (ISO 27001:2022, attach evidence | Yes |
| Documentary evidence of prior ISO/IEC 27001 ISMS consultancy assignment shall be provided/attached. | Yes |
| The bidder shall submit he CV of proposed project team along with proposal and any replacement in the team will be subject to approval of PPIB with equivalent or higher qualification | Yes |
| The bidder shall be a Cyber Security company established in Pakistan for at least five years | Yes |
| The bidder or certification body must be formally authorized, recognized or affiliated with an accredited ISO/IEC 27001 certification body. Eligible bidders may participate through Joint Venture or partnership with an ISO accredited certification body | Yes |
| The bidder must be PTA approved Category-I Cyber Security audit firm | Yes |
| The bidder must be registered or recognized by N-CERT CAT-1 and or relevant national cyber security authorities where applicable | Yes |
| The bidder must have successfully performed RIsk Assessment and ISMS Consultancy Services for at least four clients in Pakistan, with documentary evidence. Attach list of clients for which requisite assignments were performed | Yes |
| Undertaking on Company/firm letter head that consultancy firm is in compliance of applicable laws of Pakistan and has no conflict of interest with regard to assignments to maintain confidentiality of PPIB's data and documents received in discharge of assignments and has not been blacklisted by GoP or its entiteis | Yes |
| Proof of minimum five years of working experience , in case the company/firm has gone through merger/restructuring /name change etc, within period of five years, it shall be required to submit proof of its existence prior to such merger to qualify for fie years of requisite experience | Yes |
Quality and Cost Based Selection (QCBS)
| Technical Marks | 80 | |
|---|---|---|
| Passing Marks | 64 | |
| Technical Evaluation Criteria | ||
| Company/Firm Experience (Quantitative)(Doc Required) Organizational Background, history and expertise in Risk Assessment /ISO/IEC 27001 consultancy and audits (20) Ten years of experience (15) Additional experience - 1 point for each additional year (5) | 20 | |
| Qualification /Certification (Quantitative)(Doc Required) Marks (20) Minimum five members having bachelor degree in Cyber Security/Information Security and or equivalent qualification with at least two members as certified ISO 27001:2022 Lead Auditor/Implementer. Out of five members at least two of them have successfully completed two projects of similar nature (15) Additional points (max 5) for each relevant certification e.g CISA, CISSP, CISM) - 1 point for each (5) | 20 | |
| Pas Projects (Quantitative)(Doc Required) At least four similar projects (two of which in Government sector / Banking sector. Documentary evidence must be attached)- 5 points for each successful project (20) 5 Points for each successful project (5) | 20 | |
| Proposed Approach & Methodology (Qualitative)(Doc Required) Marks (10) Detailed Methodology for gap assessment, ISMS development and certification readiness (6) Innovative ideas/indigenous tool or best practices proposed to be used during the projects (4) | 10 | |
| Financial Status and Stability (Quantitative)(Doc Required) The bidder must demonstrate annual turnover of at least PKR 200 million over the past three years supported by audited financial statements. Bidders annual financial statements for past three years. Confirmation of no Bankruptcy, default or major financial disputes. (10) | 10 | |
Positions Without Lots :
| Position | Delivery Schedule | Quantity | Bid Security |
|---|---|---|---|
| COnsultancy Service for Implementation of ISO /IEC 27001:2022 - Information Security Management System (ISMS) and Its Policy |
Address: Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1, Islamabad Capital Territory Schedule: 03 Days Quantity: 1 |
1 | 180000 |
No
Positions Without Lots :
Position: COnsultancy Service for Implementation of ISO /IEC 27001:2022 - Information Security Management System (ISMS) and Its Policy
TORs (Terms of Reference):
Private Power and Infrastructure Board (PPIB) intends to establish and implement an organization-wide Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022 to strengthen information security governance and adopt internationally recognized best practices.
To engage a qualified consultancy firm to assess, design, implement, document, and support certification of an ISO/IEC 27001:2022-compliant ISMS covering PPIB's operations, personnel, information assets, technologies, and business processes.
The consultant shall provide end-to-end consultancy services, including but not limited to:
The consultant shall provide, at a minimum, the following deliverables:
The assignment shall be completed within a mutually agreed implementation schedule, including gap assessment, implementation support, internal audit, readiness review, and certification support.
The consultancy firm shall possess demonstrable experience in ISO/IEC 27001 implementation and certification support. The proposed team should comprise qualified professionals with relevant certifications and proven expertise in information security, risk management, ISMS implementation, and internal auditing.
All reports, policies, procedures, templates, records, training materials, and other outputs developed under this assignment shall become the exclusive property of PPIB. The consultant shall maintain strict confidentiality of all information accessed during the assignment and shall not disclose or reuse such information without prior written approval of PPIB.
All consultancy activities, stakeholder engagements, workshops, assessments, training sessions, and implementation support shall be carried out on-site at PPIB premises unless otherwise approved by PPIB in writing.
(this TORs are brief, detailed RFP will be shared in later stage or on website)
For Individual Positions
| # | Position Title | Quantity | Unit Price (PKR) | Total Price (PKR) | Delivery Location | Delivery Period / Year | Country of Origin |
|---|---|---|---|---|---|---|---|
| 1 | |||||||
| 2 |
| # | Lot Title | Total Lot Price (PKR) | Country of Origin |
|---|---|---|---|
| 1 | [Lot 1 Title] |
The following Special Conditions of Contract shall supplement the General Conditions of Contract. Whenever there is a conflict, the provisions herein shall prevail over those in the Conditions of Contract. The corresponding clause number of the GCC is indicated in parentheses.
Number of GC Clause
Amendments of, and Supplements to, Clauses in the General Conditions of Contract>
Number of GC Clause 3.1
The Contract shall be interpreted in accordance with the laws of Islamic Republic of Pakistan
Number of GC Clause 4.1
The language is English
Number of GC Clause 6.1 and 6.2
The addresses are:
The Procuring Agency is: Private Power & Infrastructure Board (Private Power & Infrastructure Board (PPIB)), Deputy Director Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1, Islamabad Capital Territory
The Consultant Address:
The title of the subject procurement is:Procurement /RFP for Consultancy Services for Implementation of ISO/IEC 27001:2022 Assessment, IT Policy Review and Audit
Number of GC Clause 8.1
[Note: If the Consultant consists only of one entity, state “N/A”;Or
The Lead Member on behalf of the JV is ___________ ______________________________ [insert name of the member]
Number of GC Clause 9.1
The Authorized Representatives are:
The Authorized Representatives are:
For the Procuring Agency:
Private Power & Infrastructure Board (Private Power & Infrastructure Board (PPIB)), Deputy Director
Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1, Islamabad Capital Territory
+92-333-051-1845
saqib@ppib.gov.pk
For the Bidder:
Name: ………………………
Designation: ……………..
Address: ……………………………..
Number of GC Clause 11.1
[Note: If there are no effectiveness conditions, state “N/A”]OR
List here any conditions of effectiveness of the Contract]
The effectiveness conditions are the following: [insert “N/A” or list the conditions]
Termination of Contract for Failure to Become Effective:
The time period shall be _______________________ [insert time period, e.g.: four months].
Commencement of Services:
The number of days shall be_________________ [e.g.: ten].
Confirmation of Key Experts’ availability to start the Assignment shall be submitted to the Procuring Agency in writing as a written statement signed by each Key Expert.
Expiration of Contract:
The time period shall be ________________________ [insert time period, e.g.: twelve months].
Number of GC Clause 23.1
No additional provisions.
The following limitation of the Consultant’s Liability towards the Procuring Agency can be subject to the Contract’s negotiations:
Number of GC Clause 24.1
The insurance coverage against the risks shall be as follows:
(a) Professional liability insurance, with a minimum coverage of ______________________ [insert amount and currency which should be not less than the total ceiling amount of the Contract];
Number of GC Clause 33. Removal of Experts or Sub-consultants
[Note to Procuring Agency: include the following for supervision of infrastructure contracts (such as Plant or Works) and for other consulting service where the social risks are substantial or high, otherwise delete.]
Price adjustment on the remuneration …………….. [insert “applies” or “ does not apply”]
[If the Contract is less than 18 months, price adjustment does not apply.
If the Contract has duration of more than 18 months, a price adjustment provision on the remuneration for foreign and/or local inflation shall be included here. The adjustment should be made every 12 months after the date of the contract for remuneration in foreign currency and – except if there is very high inflation in the Procuring Agency’s country, in which case more frequent adjustments should be provided for – at the same intervals for remuneration in local currency. Remuneration in foreign currency should be adjusted by using the relevant index for salaries in the country of the respective foreign currency (which normally is the country of the Consultant) and remuneration in local currency by using the corresponding index for the Procuring Agency’s country. A sample provision is provided below for guidance:
Payments for remuneration made in [foreign and/or local] currency shall be adjusted as follows:
{or }
where
Rf is the adjusted remuneration;
Rfo is the remuneration payable on the basis of the remuneration rates (Appendix C) in foreign currency;
If is the official index for salaries in the country of the foreign currency for the first month for which the adjustment is supposed to have effect; and
Ifo is the official index for salaries in the country of the foreign currency for the month of the date of the Contract.
{or }
where
Rl is the adjusted remuneration;
Rlo is the remuneration payable on the basis of the remuneration rates (Appendix D) in local currency;
Il is the official index for salaries in the Procuring Agency’s country for the first month for which the adjustment is to have effect; and
Ilo is the official index for salaries in the Procuring Agency’s country for the month of the date of the Contract.
The currency of payment shall be the following: PKR
[The advance payment could be in either the foreign currency, or the local currency, or both; select the correct wording in the Clause here below. The advance bank payment guarantee should be in the same currency(ies)]
The following provisions shall apply to the advance payment and the advance bank payment guarantee:
Following is the guidance for Dispute Resolution
Notwithstanding any reference to the arbitration herein, the parties shall continue to perform their respective obligations under the Contract unless they otherwise agree that the Authority shall pay the Bidder any monies due to the Bidder.
Arbitrator’s fee:
The fee shall be specified in Pak Rupees, as determined by the Arbitrator, which shall be shared equally by both parties.
Appointing Authority for Arbitrator:
By the Mutual Consent or in accordance with the provisions of Arbitration Act, 1940, in case the parties fail to reach a consensus on the name of sole arbitrator, any party may submit an application to the Chief Justice Islamabad High Court for appointment of sole arbitrator. The Chief Justice IHC may appoint a former judge of any High Court or Supreme Court as the sole arbitrator to resolve the dispute between the parties.
Rules of procedure for arbitration proceedings:
Any dispute between the Authority and a Bidder who is a national of the Islamic Republic of Pakistan arising in connection with the present Contract shall be referred to adjudication or arbitration in accordance with the laws of the Islamic Republic of Pakistan including Arbitration Act 1940, however above provision shall prevail in referring the case to the Arbitrator.
Place of Arbitration and Award:
The arbitration shall be conducted in English language and place of arbitration shall be at Islamabad. The award of the arbitrator shall be final and shall be binding on the parties.
Date: [insert date (as day, month and year)]
Bid No.:P48860
To: Private Power & Infrastructure Board (Private Power & Infrastructure Board (PPIB)), Deputy Director Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1, Islamabad Capital Territory
We, the undersigned, declare that:
We understand that, according to your conditions, Bids must be supported by a Bid Securing Declaration.
We accept that we will be blacklisted and henceforth cross debarred for participating in respective category of public procurement proceedings for a period of (not more than) six months, if fail to abide with a bid securing declaration, however without indulging in corrupt and fraudulent practices, if we are in breach of our obligation(s) under the Bid conditions, because we:
We understand this Bid Securing Declaration shall expire if we are not the successful
Bidder, upon the earlier of (i) our receipt of your notification to us of the name of the successful Bidder; or (ii) twenty-eight (28) days after the expiration of our Bid.
This CONTRACT (hereinafter called the “Contract”) is made the [number] day of the month of [month], [year], between, on the one hand, [name of Procuring Agency or Recipient] (hereinafter called the “Procuring Agency”) and, on the other hand, [name of Consultant] (hereinafter called the “Consultant”).
[If the Consultant consist of more than one entity, the above should be partially amended to read as follows: “…(hereinafter called the “Procuring Agency”) and, on the other hand, a Joint Venture consisting of the following entities, each member of which will be jointly and severally liable to the Procuring Agency for all the Consultant’s obligations under this Contract, namely, [name of member] and [name of member] (hereinafter called the “Consultant”).]
WHEREAS
NOW THEREFORE the parties hereto hereby agree as follows:
The following documents attached hereto shall be deemed to form an integral part of this Contract:
In the event of any inconsistency between the documents, the following order of precedence shall prevail: the Special Conditions of Contract; the General Conditions of Contract, including Attachment 1; Appendix A; Appendix B; Appendix C and Appendix D; and Appendix E. Any reference to this Contract shall include, where the context permits, a reference to its Appendices.
2. The mutual rights and obligations of the Procuring Agency and the Consultant shall be as set forth in the Contract, in particular:
(a) the Consultant shall carry out the Services in accordance with the provisions of the Contract; and
(b) the Procuring Agency shall make payments to the Consultant in accordance with the provisions of the Contract.
IN WITNESS WHEREOF, the Parties hereto have caused this Contract to be signed in their respective names as of the day and year first above written.
For and on behalf of [Name of Procuring Agency]
[Authorized Representative of the Procuring Agency – name, title and signature]
For and on behalf of [Name of Consultant or Name of a Joint Venture]
[Authorized Representative of the Consultant – name and signature]
[For a joint venture, either all members shall sign or only the lead member, in which case the power of attorney to sign on behalf of all members shall be attached.]
For and on behalf of each of the members of the Consultant [insert the name of the Joint Venture]
[Name of the lead member]
[Authorized Representative on behalf of a Joint Venture]
[add signature blocks for each member if all are signing]
Contract Number: Contract Value: Contract Title:
Dated:
[Name of Supplier] hereby declares that it has not obtained or induced the procurement of any contract, right, interest, privilege or other obligation or benefit from Government of Pakistan or any administrative subdivision or agency thereof or any other entity owned or controlled by it (GoP) through any corrupt business practice.
Without limiting the generality of the foregoing [Name of Supplier] represents and warrants that it has fully declared the brokerage, commission, fee etc. paid or payable to anyone and not given or agreed to give and shall not give or agree to give to anyone within or outside Pakistan either directly or indirectly through any natural or juridical person, including its affiliate, agent, associate, broker, consultant, director, promoter, shareholder, sponsor or subsidiary, any commission, gratification, bribe, finder's fee or kickback, whether described as consultations fee or otherwise, with the object of obtaining or inducing the procurement of a contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP, except that which has been expressly declared pursuant hereto.
[Name of Supplier] certifies that it has made and will make full disclosure of all agreements and arrangements with all persons in respect of or related to the transaction with GoP and has not taken any action or will not take any action to circumvent the above declaration, representative or warranty.
[Name of Supplier] accepts full responsibility and strict liability for making and false declaration, not making full disclosure, misrepresenting fact or taking any action likely to defeat the purpose of this declaration, representation and warranty. It agrees that any contract, right interest, privilege or other obligation or benefit obtained or procured as aforesaid shall, without prejudice to any other right and remedies available to GoP under any law, contract or other instrument, be voidable at the option of GoP.
Notwithstanding any rights and remedies exercised by GoP in this regard, [Name of Supplier] agrees to indemnify GoP for any loss or damage incurred by it on account of its corrupt business practices and further pay compensation to GoP in an amount equivalent to ten time the sum of any commission, gratification, bribe, finder's fee or kickback given by [Name of Supplier] as aforesaid for the purpose of obtaining or inducing the procurement of any contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP.
To: Private Power & Infrastructure Board (Private Power & Infrastructure Board (PPIB)), Deputy Director Emigration Tower, Ground & 2nd Floor, Plot#10, G-8 Mauve Area G 8/1, Islamabad Capital Territory
WHEREAS [name of Bidder] (hereinafter called “the Bidder”) has undertaken, in pursuance of Contract No. [reference number of the contract] dated [insert date] for provision of Goods(hereinafter called “the Contract”).
AND WHEREAS it has been stipulated by you in the said Contract that the Bidder shall furnish you with a Bank Guarantee by a reputable bank for the sum specified therein as security for compliance with the Bidder’s performance obligations in accordance with the Contract.
AND WHEREAS we have agreed to give the Bidders guarantee:
THEREFORE, WE hereby affirm that we are Guarantors and responsible to you, on behalf of the Bidder, up to a total of [amount of the guarantee in words and figures], and we undertake to pay you, upon your first written demand declaring the Bidder to be in default under the Contract and without cavil or argument, any sum or sums within the limits of [amount of guarantee] as aforesaid, without your needing to prove or to show grounds or reasons for your demand or the sum specified therein.
This guarantee is valid until the: [insert date]
Signature and seal of the Guarantors
_____________________________________________________________________
[name of bank or financial institution]
_____________________________________________________________________
[address]
_____________________________________________________________________
[date}