DCDE seeks to appoint a partner to assist in the planning, implementation, and assure a cohesive programme that closes all gaps to compliance, operationalises Irish Risk Management Measures (RMMs) and NIS2 (Network and Information Security Directive (EU) 2022/2555) Article 21 measures, aligns DCDE to CyFun (Cyber Fundamentals Framework), and establishes governance, processes, and reporting required by the National Cyber Security Bill 2024. The appointed partner will deliver a comprehensive program addressing areas such governance, business continuity, risk management, operational resilience, and technical uplift to achieve compliance with NIS2 (Network and Information Security Directive (EU) 2022/2555), CyFun (Cyber Fundamentals Framework), and the National Cyber Security Bill 2024. The scope would include but is not limited to implementing risk analysis frameworks, incident handling processes, business continuity and disaster recovery plans, AI system security reviews (Artificial Intelligence), SAAS security reviews (Software as a Service) and supply chain security measures as well tabletop exercises and pen test reviews. It will also cover system acquisition and maintenance controls, vulnerability management, and assisting DCDE with coordinated vulnerability disclosure.