The Department of Foreign Affairs and Trade (DFAT) Cyber Affairs and Critical Technology Branch (CYB) is seeking to engage an industry partner to design and deliver ‘SevisDEx’, a National Secure Data Exchange Platform (SDEP) for the Government of Papua New Guinea (GoPNG). SevisDEx will be delivered in partnership with PNG’s Department of Information and Communications Technology (DICT).
SevisDEx will serve as the backbone for secure, interoperable, and standards-compliant data exchange across all GoPNG bodies. This work will deliver a highly secure, resilient, end-to-end SDEP, including API management, identity and access control, monitoring, analytics, developer enablement and integration with existing and future government systems.
SevisDEx is a key component of SevisPNG, a comprehensive digital government platform to provide secure, accessible, and efficient digital services that empower citizens and enhance their interaction with government institutions.
SevisPNG has four main components:
- SevisPass (Digital ID): A new digital identity that works independently of the current National ID, using other IDs to create a secure online profile for citizens and businesses.
- SevisPortal: A single online platform where people can access a range of government services with one login.
- SevisDEx: A system that allows government agencies and private companies to share data securely.
- SevisPay: A digital payment system for government and private transactions.
Capability
The provider will have the necessary technical capability and understanding to advise the implementation of the SDEP and develop and implement associated deliverables, including the enabling work required on interoperability, standardisation, sustainment, governance, policy and process, and training and support.
Submission should include the following key components:
- A technical proposal, including architecture diagram, technology stack and proposed implementation timeline.
- A compliance matrix mapping features to Digital Government Act sections (see 3a, below for more detail).
- Change Management and stakeholder engagement plan.
- Training and knowledge transfer strategy.
Capacity
The provider should, to the best extent possible, provide DFAT with examples of where the provider has previously delivered high quality SDEP implementations to government and/or industry, or successful large-scale API governance deployments. Examples of previous work with and in PNG, the Pacific region or similar regulatory environments are highly encouraged.
The provider should have the necessary expertise to deliver on requirements and, to the best extent possible, provide DFAT with the resumés of personnel proposed for the project. The provider will also demonstrate expertise spannings
