| RFP Number | EHRA-01-07 |
| RFP Title | EHRA digital security protocols |
| RFP Closing Date and Time: | 23:59 EET 1 March 2022 |
| Proposal Submission E-mail: | info@harmreductioneurasia.org |
Background information
Eurasian Harm Reduction Association (EHRA) is a non-for-profit public membership-based organization uniting harm reduction activists and organisations from Central and Eastern Europe and Central Asia (CEECA) with its mission to actively unite and support communities and civil societies to ensure the rights and freedoms, health, and well-being of people who use psychoactive substances in the CEECA region.
The COVID-19 pandemin has significantly affected the way we communicate and work. We are increasingly using digital tools and the internet for document management, internal and external communication. Most events, such as work meetings, training sessions, workshops and conferences are moving to an online format. This creates additional risks for the organisation related to leakage of confidential information, theft of personal data/documents, hacking of emails and software, surveillance, wiretapping, use of such information for public accusations, etc.
The organisation has developed and adopted a number of internal regulations on data protection and information systems, employee confidentiality and non-disclosure, personal data protection policy which is compliant with the EU General Data Protection Regulation (GDPR). EHRA plans to conduct regular reviews of digital security risks and discuss measures to prevent technical, reputational and other risks that depend heavily on digital literacy, habits and safe use of the Internet for work, internal and external communications.
In addition, the promotion of the organisation’s values and active advocacy efforts cause negative reactions from a conservative part of the public, putting individual staff and members at additional risk of being targeted for repressive measures against freedom of expression and information. Working with sensitive and political issues, human rights activities and supporting activists in totalitarian countries creates additional risks in the organisation’s public online communication, which need to be analysed and minimised.
Objectives of the consultancy:
The aim is to provide technical assistance to EHRA to develop an algorithm and approaches on digital security and risk reduction in public communication, taking into account the main risks associated with the communication topics: promotion of harm reduction, advocacy for reform of repressive drug policies, and protection of the human rights of people who use drugs.
The objectives are:
- Conduct an audit/analysis of internal documentation, existing EHRA practices and policies on digital security and personal data protection with an analysis of personal and organisational risks
- Conduct a consultation with EHRA team on digital security and risk mitigation in public communication. A face-to-face meeting is scheduled for 23-24 March in Belgrade. EHRA will cover travel and accommodation costs for consultant.
- Propose algorithms/protocols on security in digital communication for EHRA Secretariat and members.
- Conduct an online training / webinar for EHRA members on implementation of EHRA algorithm/protocol on security in digital communication.
The assignment can be completed in Russian or English.
EHRA Secretariat will act as a reference point and will support a consultant to ensure a seamless process.
Timeline.
The assignment must be completed no later than 31 May 2022.
Evaluation Criteria
A two-stage procedure will be utilized in evaluating the proposals:
- evaluation of the previous experience (portfolio) via technical criteria – 80% in total evaluation;
- comparison of the costs (best value for money) – 20% in total evaluation.
Cost evaluation is only undertaken for technical submissions that score a minimum 80 points out of a maximum of 100 as a requirement to pass the technical evaluation. A proposal which fails to achieve the minimum technical threshold will not be considered further.
To assess submitted applications, the following technical criteria will be used (80%) (maximum possible number of points is 100):
| Criteria: | Points |
| Proven track record of experience in conducting similar assignments in last
three years, including development of security algorithms/protocols (should be clear from LoI and CV) |
30 |
| Understanding of harm reduction, drug policy, HIV response and/or civil society involvement to advocacy and capacity building in social and public health issues in EURASIA (should be clear from LoI and CV) | 30 |
| Experience in conducting trainings (as facilitator/moderator) | 20 |
| Fluency in English OR Russian | 10 |
| Maximum possible number of points | 100 |
Cost proposal (20%): EHRA will allocate same importance to the provided portfolio and recorded experience as to the cost of the services. The cost proposal will be evaluated in terms of best value-for money to EHRA in EUR, price and other factors considered
Condition
- Only consultants who are fluent and understand both – Russian and English are eligible to apply.
- This announcement and its attachments shall not be construed as a contract or a commitment of any kind. This request for proposals in no way obligates EHRA to award a contract, nor does it commit EHRA to pay any cost incurred in the preparation and submission of the proposals.
How to apply
To be eligible as a EHRA consultant, any organization or individual must comply with the Eurasian Harm Reduction Association Code of Ethics which you can find at the following link: https://old.harmreductioneurasia.org/ehra-code-of-ethics/
Applicants should submit (1) CV and (2) cover letter, which should clearly reflect:
– the tasks for which the consultant is applying.
– the candidate’s competencies and work experience required for the task.
– a detailed work plan,
– the number of working days required for each step,
– cost in US dollars and deadlines for completion.
Send proposals to: info@harmreductioneurasia.org .
In the subject line of your e-mail please indicate: EHRA-01-07. EHRA digital security protocols. Otherwise, the application will not be considered.
General terms
Interested consultants should pay attention to the following conditions:
EHRA will sign an agreement with the winner of the competitive selection. The contract will define a detailed work plan and payment terms.
EHRA reserves the right (but does not commit itself to obligations) to enter into negotiations with one or more applicants in order to obtain clarifications or additional information, as well as to agree on the timing of work.
The winner must confirm his/her daily rate before signing of the agreement.
Each candidate will be contacted individually.
Any questions regarding the participation should be sent to igor@harmreductioneurasia.org before 28th February, 2022.