Abridged Bid Notice Under Open Domestic Bidding Method tender at Bank of Uganda

1. Bank of Uganda invites Sealed Bids from Eligible Bidders for the following tender:

2. The bidding document may be inspected online under the Procurement tab on the Bank of Uganda website www.bou.or.ug.
3. The Bidding document in English shall be purchased by interested Bidders upon payment of a non-refundable fee of UGX100,000 or USD 27 to the following account:

Local payments through a Commercial Bank to:
Account Title: Other Income
Bank Name: Bank of Uganda
Account Number: 099405017

International payments can be paid using the details below:
Intermediary bank: Citibank NA
Intermediary bank SWIFT code: CITIUS33
Beneficiary bank name: Bank of Uganda
Beneficiary Bank Account: 580505120
Beneficiary Account title: Other Income
Beneficiary Account number: 099405017

4. The Bidding document shall be issued to interested bidders by email upon submission of proof of payment to procurement@bou.or.ug. OR Bidders may download the tender document from the Bank of Uganda website www.bou.or.ug and submit their bid with proof of payment or transfer of funds.
5. The deadline for bid submission shall be June 04, 2025 at 03:00pm EAT.
6. The detailed bid invitation notice is available on the Bank of Uganda Website at www.bou.or.ug.

EXPANDED JOB DESCRIPTION
Project: Provision of Identity and Access Management (IAM) Solution

Scope of Work:

• Design and implement an enterprise IAM solution covering 15,000+ users across 45+ branches
• Integrate with existing systems including:
  • Core banking applications
  • HR management systems
  • Active Directory services
  • Mobile banking platforms
• Implement multi-factor authentication for all privileged accounts
• Configure role-based access controls with granular permissions
• Provide 3-year maintenance including patches and upgrades

Technical Requirements:

• Must support:
  • SAML 2.0, OAuth 2.0, OpenID Connect
  • FIDO2 authentication standards
  • Biometric integration
• Cloud-ready architecture with hybrid deployment capability
• Real-time monitoring with SIEM integration
• Compliance with:
  • BoU security policies
  • PCI DSS 4.0
  • Uganda Data Protection Act

Vendor Qualifications:

• Minimum 5 successful IAM implementations in banking sector (proof required)
• Certified engineers for proposed solution
• Local support office in Uganda with 24/7 response capability
• Financial statements demonstrating stability

Implementation Timeline:

• 6 months for phased deployment
• 2-week knowledge transfer program
• Quarterly security audits during maintenance

Security Mandates:

• All implementation staff must pass BoU security clearance
• Source code escrow agreement required
• Disaster recovery with <2hr RTO

Note: This retender follows the bank's digital transformation roadmap and cybersecurity enhancement program.

MANAGEMENT
May 2025

Plot 37/45 Kampala Road, P.O. Box 7120, Kampala. Tel: 256-414-2584416, 258061, 0312-392000, 0417-302000.
Telex: 61050861244; Fax: +256-414-233818 Website: www.bou.or.ug; E-mail address: procurement@bou.or.ug