SEALED PROPOSAL FOR INFORMATION SYSTEM AUDIT

(First Published date 21/04/2017)

Machhapuchchhre Bank Limited. (MBL), “A” class Commercial Bank, having its Corporate Office at Lazimpat, Kathmandu invites interested firm/company for the Information System Audit of the Bank. MBL is engaged in banking activities all across Nepal through its 56 branches, 1 extension counter and 73 ATMs.

Information Systems Audit should cover entire Information Systems Infrastructure which includes Core Banking System (CBS), Servers & Other Hardware Items, Operating Systems, Databases, Application Systems, Technologies, Networks, Facilities and Process & People (but not limited to) of the undernoted:

1. Policy, Procedures, GAP Analysis and Risk Assessment
2. DC/DR Center (Physical and Environmental Security)

• Operating Systems Audit of Servers, Systems and Networking Equipment’s

1. Application Level Security Audit
2. Audit of DBMS and Data Security Network Security
3. Internal Vulnerability Assessment/ Penetration Testing

• Interfaces, Card, Delivery Channels (Internet Banking, Mobile Banking)
• Backup & Recovery Process and Testing

1. Core Banking System (CBS) Temenos T-24
2. Others (HR Management, Asset Management, Inventory Management, Logging, Agreements, AMC, SLAs) Eligibility Criteria:

Only those firm/company who fulfill the following criteria are eligible to respond the RFP. Offers received from the firm/company who do not fulfill all or any of the following eligibility criteria are liable to be rejected.

1. The firm/company should:
2. Be in business of Information System auditing for at least 3 (Three) years
3. The bidder should be Registered Company under relevant act of their country.
4. Have conducted at least 5 Information System audits of Data Center and other IT infrastructure of banks.
5. Should have conducted application audit of Core Banking System (CBS) in at least 3 commercial banks with minimum of 30 plus branches;
6. Have minimum of 6 professionals with valid CISA/ CISM/ CISSP or similar qualifications, who have associated/ conducted at least 3 (three) IS audit of banks and should be on permanent payroll of the

organization.

Note: Certified copies of relevant documents/ certificates should be submitted as proof in support of the claims made. The bank reserves the right to verify/evaluates the claims made by the bidder independently.

Collection of Request For Proposal (RFP) Document:

1. A copy of RFP can be obtained from General Administration & Procurement Department, Corporate Office, Lazimpat after submission of deposit slip of NPR 6,000/- (Non-refundable) in the account of Sundry Creditor-Tender Form A/C No: 9999-524-999998-249

Submission Deadline: May 21,2017 by 3.00 pm

(Note: Incase of public holiday, the submission deadline will be the next working day)

The bank reserves the right to accept/reject any or all proposals fully or partially without assigning any reasons whatsoever.

General Administration & Procurement Department MBL Tower, La2impat, Kathmandu Phone No.: 01-4428556

Machhapuchchhre Bank Limited