2026-0094 Cyber Governance Supp. - Lessons Learned Scorecard (NS) REMOTE - 6 Jul

Deadline Date:  Monday 06 July 2026



Requirement:  Cyber Governance Support - Lessons Learned and Scorecard Oversight



Location:  Offsite in a NATO Country



Cost Not to Exceed:  EUR 125,100



Period of Performance: 2026 BASE: 03 August 2026 (tentative) to 31 December 2026



Required Security Clearance:  NATO SECRET


Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:

1. Current National or NATO SECRET clearance
2. Nationality of one of the NATO member countries
3. Current work visa for the specific location if applying for an in-country position

Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted.



Special Terms and Conditions:  Non-disclosure agreement must be signed



Objective:



The objective of this engagement is to provide governance and coordination support for enterprise cybersecurity governance activities, specifically supporting the Cyber Lessons Learned (LL) and NATO Enterprise Cybersecurity Scorecard (Scorecard) processes.



The contractor will assist CDT in coordinating stakeholders, supporting reporting activities and ensuring that cybersecurity governance processes are executed in a structured, consistent and traceable manner.



The engagement focuses on supporting two main work packages:

• Cyber Lessons Learned coordination and process support
• Cybersecurity Scorecard oversight

The contractor will provide coordination and documentation support but will not perform operational cybersecurity activities or entity-level assessments.



Scope of Work:



The contractor shall provide governance support services across two distinct Work Packages (WP).



Work Package I - Cyber Lessons Learned Support



The contractor shall support the implementation and operationalization of the Cyber Lessons Learned process among relevant cybersecurity stakeholders, ensuring that lessons related to cybersecurity activities are systematically identified, captured, structured, coordinated and tracked.



In support of this objective, the contractor shall assist CDT in coordinating stakeholders involved in the relevant enterprise cybersecurity processes and facilitating the capture and documentation of lessons learned.

Activities within the scope include:

• Supporting the implementation and operationalization of the Cyber Lessons Learned process across relevant cybersecurity stakeholders
• Engaging stakeholders involved in the relevant cybersecurity processes
• Coordinating the capture and structuring of lessons learned information
• Supporting documentation of changes made to procedures or documentation resulting from lessons learned
• Supporting the organization and documentation of Lessons Learned coordination meetings and workshops
• Supporting the maintenance of templates, repositories or portals used to capture lessons learned information
• The contractor will act as a coordinator supporting stakeholders involved in the Lessons Learned process.

Work Package II - Cybersecurity Scorecard Oversight Support



The contractor shall provide coordination and oversight support related to the execution of the annual NATO Cybersecurity Scorecard Assessment (Scorecard) cycle, ensuring visibility of progress and alignment with Lessons Learned processes.



Activities within the scope include:

• Supporting coordination of the Assessment Team (including contractors) performing Scorecard activities
• Reviewing contractor outputs and providing quality assurance observations to CDT
• Maintaining oversight documentation such as tracking dashboards, issue logs and status summaries
• Scorecard outputs may also be used as inputs to support the Cyber Lessons Learned process.

Requirements

Security and Non-Disclosure Agreement

• The resource providing services under this SoW must be in possession of a security clearance of NATO SECRET or above. The signature of a Non-Disclosure Agreement between the contractors contributing to this task and NCIA will be required prior to execution.

Qualifications

• Expertise in Cyber Security: Contractor personnel must have extensive experience in cyber security with a focus on analytical assessment, scorecard development and performance metrics. Personnel must demonstrate a strong understanding of cybersecurity processes such as Cyber Incident Management, Defensive Cyberspace Operations, Enterprise Risk Management and Cyber Threat Intelligence Analysis and Sharing.
• Methodology Development Skills: Contractor personnel must have proficiency in developing, refining and updating methodologies for assessing cybersecurity maturity and performance.
• Experience with Lessons Learned or Knowledge Management Processes: Contractor personnel should have experience supporting Lessons Learned, knowledge management or continuous improvement processes, including capturing lessons, structuring information and tracking improvement actions.
• Communication Skills: Contractor personnel must demonstrate strong written and verbal communication skills for engaging with various stakeholders and facilitating Enterprise-wide assessments.
• Autonomous Working Capability: The contracted individual must be capable of performing effectively and efficiently with minimal supervision.