ELECTRICITY ACCESS SCALE-UP PROJECT (EASP)
FINANCIAL INTERMEDIATION COMPONENT

REQUEST FOR EXPRESSIONS OF INTEREST (EOI) FOR IMPLEMENTATION AND CERTIFICATION OF AN INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS) FOR UECC - ISO/IEC 27001:2022
Procurement Reference Number: UECC-EASP/CONS/2025-26/00008

1 BACKGROUND

The Government of Uganda (GOU) has received funding from the World Bank for the implementation of the Electricity Access Scale-up Project (EASP) to be implemented over a period of four (4) years. EASP will support GOU's efforts to increase access to electricity for households, refugees and host communities, industrial parks, commercial enterprises, and public institutions. The EASP is being implemented by two main entities; namely the Ministry of Energy and Mineral Development (MEMD) and the Uganda Energy Credit Capitalisation Company (UECCC).

UECCC is a Government company in place to provide financial, technical, and other support to renewable energy projects and programs in Uganda, with a particular focus on enabling private sector participation.

UECCC is implementing the Financial Intermediation component of the EASP that entails:

1. Provision of Credit Support Facility to Participating Financial Institutions (PFIs).

2. Results Based Grants to Energy Service Companies (ESCOs).

3. Public Institutions (Solar Electrification and Clean Cooking) and

4. Technical Assistance Support to ESCOs, (PFIs) and other eligible beneficiaries.

UECCC intends to engage the services of a qualified Consultant to support in Support ISO/IEC 27001:2022 Information Security  Management System (ISMS) Implementation and Certification culminating in successful certification by an accredited certification body.

UECCC now invites eligible Consultancy firms ("Consultants") to express their interest in providing the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services.

The shortlisting criteria are:

• The firm should possess at least 4 years' experience conducting ISO27001 certification of organizations of a similar nature. For clarity, organizations should be government MDA with client facing services and lots of integrations along with handling of Private Citizen Data.

• The firm should be NITA-U Level II Certified

• The firm should be certified with the Personal Data Protection Office of Uganda

  Uganda tender opportunities

• The firm should be ISO/IEC 27001 Certified by a reputable certification body

• The firm should demonstrate proven work experience of at least 4 similar assignments (in ISO 27001 Certification) conducted within Uganda.

• The firm should be accredited by either PECB, APMG, BSI, ISACA or other equivalent bodies for offering training and certification of individuals towards ISO 27001 Lead Implementer Certification. Evidence of this is required.

• Should have evidence of a local office in Uganda (support and implementation)

2. SELECTION PROCESS

The attention of interested Consultants is drawn to Section III, paragraphs 3, 14, 3.16, and 3.17 of the World Bank's "Procurement Regulations for IPF Borrowers" July 2016 revised November 2017, August 2018 and November 2020, September 2023 and September 2025 ("Consultant Guidelines") setting forth the World Bank's policy on conflict of interest.

The Consultant will be selected in accordance with the Consultant Qualification Selection (CQS) method set out in the World Bank Procurement Regulations (Revised September 2025).

Further information can be obtained at the address below during office hours from 8.30am to 5.00pm EAT.

Expressions of interest should be delivered in written form to the address below (in person, or by mail, by 23rd July 2026 EAT).

The Managing Director,
Uganda Energy Credit Capitalisation Company
Amber House, Plot 29/33 Kampala Road, 3rd Floor, Block E
P.O. Box 29725 Kampala

Electronic submissions should be submitted to
ndu@ueccc.org.ug