TERMS OF REFERENCE FOR ADVANCED ONLINE TRAINING ON DATA STORAGE, PRIVACY, AND PROTECTION

Background

HORIZONT3000 (Austrian organization for development cooperation) supports partner organizations in East Africa in the areas of natural resources, rural development and human rights. Currently, HORIZONT3000 is implementing a project named “Thrive digitalisation for the benefit of 46 partner organisations and their target groups in Uganda, Kenya and Tanzania”. This project offers a unique opportunity to drive digitization among HORIZONT3000 Partner Organisations and their beneficiaries in Uganda, Kenya and Tanzania. This project seeks to enhance living conditions by leveraging digital solutions pioneered by partner organizations, improving digital skills through training and coaching services, and contributing to the digital transformation of communities in the East Africa region.

it is important to highlight that in November 2023, a basic training session was conducted to introduce participants to fundamental concepts related to data storage, privacy, and protection. This initial training provided an overview of various data storage options available to partner organizations, as well as insights into data privacy and protection regulations, including the General Data Protection Regulation (GDPR). Additionally, it addressed specific data protection and privacy laws in Uganda, Kenya, and Tanzania, with a focus on ensuring participants’ understanding of their legal obligations and potential penalties for non-compliance. The primary objective of the basic training was to raise awareness about the importance of data privacy and protection among partner organizations.

Objective of the advanced trainings.

The consultancy objective encompasses two key components: firstly, to conduct a comprehensive 3-hour advanced virtual training session focused on data storage, privacy, and protection for the staff members of the 46 partner organizations engaged in the Thrive digitalization project. This training aims to equip participants with in-depth knowledge and skills necessary for handling advanced data storage challenges effectively. Secondly, the consultant will provide extensive follow-up support and technical assistance not exceeding 16 hours to assist participants in implementing advanced data storage, privacy and protection solutions. This support will primarily benefit between 15 and 25 partner organizations that are actively applying the insights gained from the advanced training but require additional guidance to fully integrate these lessons into their operational frameworks.

Topics Covered:

The advanced training will cover a range of topics, including but not limited to:

• Implementing robust data security measures, including access controls, encryption protocols, and endpoint security solutions
• Developing and maintaining effective data backup strategies to ensure data availability and integrity, with an emphasis on automated backup processes and disaster recovery planning.
• Comparative analysis between cloud-based and server-based storage solutions, evaluating their respective advantages, limitations, and security implications
• Routine procedures for ensuring data security and proper storage in the workplace, covering aspects such as regular data audits, access controls, physical security measures, and employee training on security best practices.

Expected Outcomes:

The anticipated outcomes of the advanced training include:

• Enhanced understanding and proficiency in advanced data storage, privacy, and protection practices
• Improved ability to navigate complex data security challenges and mitigate risks effectively
• Strengthened capacity of partner organisations to implement advanced data protection measures and comply with regulatory requirements
• Enhanced knowledge and skills among participants on advanced data management strategies.

Scope of Work:

The consultant will be responsible for:

• Developing a detailed training plan and agenda that addresses advanced topics and learning objectives
• Delivering engaging and interactive virtual training sessions using participatory methods and case studies
• Providing a well-planned follow-up support and technical assistance as well as coaching services to partner organisations in implementing advanced data storage solutions
• Submitting reports with feedback, recommendations, and lessons learned from the advanced training session and the coaching services.

Deliverables:

The consultant will deliver the following outputs:

• A detailed training plan and agenda for the advanced virtual training session
• Deliver an engaging and informative virtual training session three (3) hours advanced virtual training session on data storage, privacy and protection.
• Follow-up coaching and technical support to assist participants in implementing advanced data storage solutions

Timeframe

The tentative schedule of this consultancy is as follows:

Activity – Date

Contracting- April 3, 2024

Developing a detailed training plan and agenda- April 4 & 8, 2024

Preparing and delivering the 3-hour virtual training- April 9, 2024

Preparing a detailed training report and other attachments- April 10, 2024

Providing follow up coaching and technical support- May 2024 (for 2days)

Compiling a brief summary report for the technical support and coaching services – May 2024

Budget:

Interested consultants are invited to submit a budget proposal that includes their fees, communication costs, taxes, and any other relevant expenses associated with the consultancy. The consultancy budget ranges from 0 to 8,000,000 Ugandan shillings or 0 to 2000 Euros at maximum. The proposed budget must be included alongside the technical proposal submission.

Qualifications:

The consultant should possess the following qualifications:

• A degree in Information Technology or a related field from a reputable university.
• Certifications in information systems security is an added advanced.
• A minimum of 5 years of experience in facilitating online trainings on data storage, privacy, and protection or related topics
• Demonstrated expertise in data security and privacy management practices, including data security techniques and incident response planning
• Familiarity with the context and challenges of Civil Society Organizations in East Africa
• Excellent communication, presentation, facilitation, and coaching skills
• Fluency in English