Tender Details
Description / Scope of Work
Lahore Electric Supply Company (LESCO) is inviting proposals for consultancy services to conduct an IT Cybersecurity Audit and NEPRA Compliance assessment for its Primary Data Center (PR) and Disaster Recovery Data Center (DR) facilities. This is a national-level, single-stage, one-envelope procurement under Tender No. 4457, with the assignment based in Lahore, Punjab. The engagement requires comprehensive evaluation of IT security posture, regulatory compliance status, and alignment with NEPRA requirements across both critical data center infrastructures that support LESCO's operational continuity.
Eligibility criteria require consultants or consulting firms with demonstrated expertise in IT cybersecurity auditing, data center security assessment, and regulatory compliance frameworks, particularly NEPRA standards applicable to utility sector IT systems. Bidders must hold relevant professional certifications, maintain valid registrations with appropriate authorities, and provide evidence of past experience in similar assignments for utility or critical infrastructure organizations. A bid security declaration is mandatory, and bidders must sign the Integrity Pact as a condition of participation.
Bid documents are available from LESCO Material Management at 22-A Queens Road, Lahore Head Quarter. Proposals must be submitted in a single sealed envelope to the Assistant Manager Procurement, LESCO. The bidding process follows a single-stage evaluation methodology. Interested organizations should contact LESCO Material Management by phone at +92-370-499-0342 or email ammm5@lesco.gov.pk for detailed tender documents, clarifications, and submission logistics.
For Bidders: Our Analysis PAKISTANTENDER INSIGHT
Independent analysis by PakistanTender, written with AI from the official notice and checked by our quality rules — not part of the official notice. Always confirm details against the original tender document.
LESCO seeks qualified consultants for a specialized IT cybersecurity and NEPRA compliance audit spanning two mission-critical data centers.
The scope involves assessment and reporting rather than implementation, making it suitable for audit boutiques and larger consulting firms with utility sector expertise. The assignment appears to be a one-time evaluation likely requiring 4–8 weeks of field work and reporting. Tight turnaround to closing (14 October 2026) suggests LESCO has urgent compliance drivers; vendors should clarify deliverables scope and resource requirements before bidding.
Who can bid: Bidders typically require: PEC registration (if applicable in consulting category), valid NTN and SECP registration, professional IT security certifications (CISM, CISSP, or equivalent), prior contracts with utility or infrastructure clients, and technical team capability. The notice does not specify minimum turnover or firm size but implies experience with regulated sector auditing.