REOI - Cybersecurity Awareness Services

Deadline for submission of Expression of Interests is 12 June 2026. Responses must be submitted via InTend. Do not submit your responses via email. In your response, please submit a completed Annex A and B. ---- Overview The United Nations International Computing Center (UNICC) invites vendors to submit an Expression of Interest (EOI) for the provision of a Security Awareness and Human Risk Management Solution. UNICC seeks to engage a vendor capable of delivering a comprehensive, SaaS-based security awareness platform to multiple United Nations Agencies through a centrally managed multi-tenant architecture. The solution is expected to support global, diverse environments and contribute to strengthening organizational security culture and reducing human cyber risk. The envisaged solution shall enable UNICC and its partner agencies to move beyond compliance-based training towards a risk-driven, intelligence-led approach aligned with international best practices, including the SANS Security Awareness & Culture Maturity Model. Key Functional Requirements Vendors are expected to demonstrate capabilities in the following areas: • Multi-Tenant Platform: A centralized environment enabling management of multiple agencies (tenants) with strict logical separation of data, configurations, and reporting, while providing global administrative oversight. The solution must be scalable to support additional organizations. • Human Risk Intelligence: A centralized capability to aggregate and analyze behavioral data, phishing exposure, and user risk indicators, providing actionable insights and trends across the organization. • Threat-Informed Content: Continuous delivery of up-to-date training content and phishing simulations based on real-world threats, attacker techniques, and social engineering campaigns. • Campaign Management: Advanced capabilities to design, schedule, execute, and monitor awareness campaigns and phishing simulations across different user groups and organizational