Mauritius Revenue Authority Calls for IT Security Audit Experts

Official Notice: Invitation for Expression of Interest for IT Security Audit at the Mauritius Revenue Authority

The Mauritius Revenue Authority (MRA) has issued an official communication inviting qualified local consulting firms to participate in a competitive process for selecting a specialist to conduct a comprehensive Information Technology (IT) Security Audit. This initiative aims to enhance the security posture of the MRA’s critical digital infrastructure, aligning with national standards and best practices for cybersecurity.

Scope and Objectives of the Engagement

The primary objective of this exercise is to identify vulnerabilities within the MRA’s core applications and underlying infrastructure. Specifically, the selected consultant will be tasked with performing a Vulnerability Assessment and Penetration Testing (VAPT). This process involves systematically evaluating the security controls of the MRA’s digital systems to uncover potential weaknesses that could be exploited by malicious actors.

The audit will cover all critical applications used for revenue collection, taxpayer management, and internal administrative functions, as well as the associated network and server infrastructure. The goal is to ensure that the MRA’s digital environment is resilient against cyber threats, safeguarding sensitive taxpayer data and ensuring the continuity of tax administration services.

Eligibility and Submission Guidelines

Interested consulting firms are advised to download the official Expression of Interest (EOI) documents from the government procurement portal at publicprocurement.govmu.org. These documents, available from Thursday, 5 April 2018, provide detailed instructions on the submission process, evaluation criteria, and required documentation.

Proposals must be submitted in sealed envelopes, clearly marked with the reference number MRA/EOI_ITSEC_AUDIT/02/18. The physical submission should be lodged at the Tender Box located on Level 8 of Ehram Court, at the corner of Mgr Gonin and Sir Virgil Naz Streets in Port Louis. The deadline for submission is Wednesday, 25 April 2018, no later than 14:00 hours local time. It is important to note that submissions via fax or email will not be accepted, and late proposals will be automatically disqualified.

Clarification and Contact Procedures

Potential applicants seeking clarification or additional information are encouraged to contact Mr. O. Hurnam, Assistant Director of Finance and Administration at the MRA. Correspondence should be sent via email to [email protected] and must reach him at least eight days before the submission deadline to ensure adequate response time. All communications should be clear and specific to facilitate efficient processing.

Rights Reserved by the MRA

The MRA reserves the right to:

• Accept or reject any expression of interest received, without providing reasons;
• Cancel or annul the entire procurement exercise at any stage without incurring any liability to the applicants;
• Make no obligation to award a contract following this process.

Implications for Participants and the Public

This notice signifies the MRA’s commitment to strengthening its cybersecurity framework in line with national policies and international standards. The selection of a qualified consultant will contribute to the continuous improvement of the Authority’s digital security measures, ultimately ensuring the protection of taxpayer information and the integrity of revenue collection systems.

For the general public and stakeholders, this initiative reflects a proactive approach to managing cyber risks in government operations. It underscores the importance of transparency, accountability, and adherence to legal and technical standards in public service delivery.

Conclusion

Through this official invitation, the MRA demonstrates its dedication to maintaining a secure and resilient digital environment. The process is structured to ensure fairness, transparency, and the engagement of competent local expertise. Interested firms are encouraged to review the detailed documentation and adhere strictly to the submission guidelines to participate effectively in this crucial cybersecurity initiative.