Incident Preparedness and Response Training Workshops to Southeast Asian Countries.

Vendors must demonstrate strong technical expertise, including experience designing and delivering cyber incident response programs, developing IRPs and playbooks, and running cyber threat assessments and scenario‑based exercises. They should show proven subject‑matter expertise supported by an organisational structure with specialised roles and experience operating in secure, multi‑lateral environments. Relevant qualifications (e.g., CISSP, CISM, ISO 27001) are expected.

They must also show sufficient capacity to mobilise and maintain a multi‑disciplinary team across multiple Southeast Asian countries, supported by a clear resourcing plan, scalable delivery capability, and organisational infrastructure for rapid mobilisation. Evidence of risk management strategies addressing potential delays, political sensitivities and cyber threat escalation is required.

The proposed approach and methodology should outline a comprehensive process for threat assessments, IRP and playbook development, and exercise design and training delivery. It must incorporate cultural, linguistic and contextual considerations and align with DFAT’s strategic objectives, probity requirements, and regional cyber norms.