IT Security Certification Training and Support Services for Salvadoran Companies

Reference: RFQ 2200328857-EL ITC wants to contract, for up to 10 months, a qualified service provider with presence in El Salvador to train, coach, prepare, and support nine (9) selected IT companies from the Ilamatepec cohort to obtain the ISO/IEC 27001, Cloud Security Alliance (CSA) STAR and PCI DSS certification certifications as follows: • ISO/IEC 27001 (Information Security Management Systems) for seven (7) companies • Cloud Security Alliance (CSA) STAR Certification for one (1) company • PCI DSS certification for one (1) company The service provider(s) will be responsible for delivering technical training and assistance, implementation guidance, coaching, gap assessment, and pre-certification preparation services (audit preparation), support and coordination with accredited certification bodies, with the objective of enabling all participating companies to complete the certification process and obtain their respective certificates, subject to the final decision of the certification bodies.

The selected provider will not act as a certification body. Given the different technical nature of these standards, the procurement is structured in two separate lots: • Lot 1: ISO/IEC 27001 and CSA STAR certifications (7+1 companies); • Lot 2: PCI DSS certification (1 company).