Terms of Reference
Enterprise Risk Management Framework &
Business Continuity Plan Consultancy
15 August 2024
Document Version 0.2
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
Version History
This section provides a summary of the changes to this document in chronological order.
Version Date Author(s) Summary of Changes
0.1 7 May 2024 D. Westby Initial version of the document with main headings.
0.2 15 Aug 2024 D. Westby Review & Update
Belize Telemedia Limited i
Terms of Reference
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
Disclaimer
This section provides a brief disclaimer based primarily on who can possess and use the information contained in this
document.
The information in this document may contain confidential and/or privileged material. If you are not the intended
recipient or have received this document in error, please notify Digi immediately and delete or destroy this
document from your system.
Any unauthorized disclosure, distribution, or copying of this document, in whole or in part, is strictly prohibited
and may result in legal action. Digi does not accept any responsibility for the accuracy or completeness of the
information contained herein, nor does it assume any liability for any loss or damage that may arise from the
unauthorized use of this document.
By opening and reviewing this document, you agree to be bound by these terms and conditions.
Belize Telemedia Limited ii
Terms of Reference
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
Contents
Version History .......................................................................................................................... i
Disclaimer ................................................................................................................................ ii
Acronyms and Abbreviations ................................................................................................iv
Definitions.................................................................................................................................iv
1 Introduction....................................................................................................................... 1
2 Background....................................................................................................................... 1
2.1 About Digi.......................................................................................................................1
2.2 Contextual Framework ...................................................................................................1
3 Objectives and Scope ..................................................................................................... 2
4 Terms of Engagement ..................................................................................................... 2
4.1 General Duties and Responsibilities ...............................................................................2
4.2 Duties and Responsibilities.............................................................................................3
4.3 Terms of Payment ..........................................................................................................3
4.4 Confidentiality, Conflict of Interest, and Intellectual Property ..........................................3
4.5 Evaluation and Performance Metrics ..............................................................................3
4.6 Conditions of Work .........................................................................................................4
4.7 Reporting & Availability...................................................................................................4
4.8 Language Requirements ................................................................................................4
5 Qualifications .................................................................................................................... 4
5.1 Education & Experience .................................................................................................4
5.2 Consultancy-Specific Competencies ..............................................................................4
5.3 General Competencies ...................................................................................................5
6 Proposal Submission Guidelines .................................................................................... 6
6.1 Proposal .........................................................................................................................6
6.1.1 Technical Proposal .........................................................................................................6
6.1.2 Financial Proposal ..........................................................................................................6
6.2 Consultant Selection Timeline ........................................................................................7
6.3 Proposal Selection Process ............................................................................................7
Belize Telemedia Limited iii
Terms of Reference
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
Acronyms and Abbreviations
This section provides a list of the main acronyms and abbreviations used in this document.
ERM Enterprise Risk Management
BCP Belize Telemedia Limited Brand
RM Risk Management
Digi Belize Telemedia Limited’s Brand
ToR Terms of Reference
Definitions
As it pertains to this document, a Consultant means an individual, a business, an organization or entity engaged,
or are in the process of being engaged, to carry out the Consultancy.
Belize Telemedia Limited iv
Terms of Reference
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
1 Introduction
The purpose of the Terms of Reference (ToR) is to provide a high-level description of the requirements for
engaging with a Business Continuity and Risk Analysis Consultant. The Consultant will be responsible for
developing and implementing business continuity and risk management plan, frameworks, policies, processes
etc. to ensure the continuity of critical business operations during unforeseen disruptions and to allow the Digi to
be in the best position to identify and manage unplanned issues and adverse events.
This Terms of Reference is a foundational document for the development of the scope of the Consultancy.
Further detailed planning, financial agreements, and technical and other specifications will be developed in
subsequent development and will be mutually agreed upon.
2 Background
This section provides background and context on Digi as an organization and a general rationale behind need for the
Consultancy.
2.1 About Digi
Digi, formerly known as Belize Telecommunications Limited, is a telecommunications and technology services
provider dating back to the early 1900s. Over the years, it has evolved from a small company into the largest
telecommunications service provider in Belize.
Digi operates a network of telecommunications services in fiber, wireline, mobile, data, and value-added products
and services. Each service line provides a full range of products and solutions, including fixed-line telephone
service, fixed wireless, national and international mobile services, high-speed data services, national and
international data networks, and innovative new business solutions.
Today, Digi's services and products are renowned for their efficiency, quality, and reliability. The company's
mission has expanded beyond consumer telephony services to provide carrier-grade telecommunications
solutions to businesses as well as the public sector.
2.2 Contextual Framework
Digi operates in a dynamic and rapidly changing environment, with various internal and external factors that can
impact its operations. These factors range from cybersecurity issues to natural disasters such as hurricanes and
flooding. The organization understands the importance of being prepared for potential risks and disruptions that
could threaten the continuity of its operations.
To enhance Digi's resilience and to minimize the impact of potential risks, the organization seeks to engage the
services of a Risk Management Consultant. The Consultant will be responsible for conducting a comprehensive
analysis of the organization's risk profile and developing an Enterprise Risk Management Framework and
Business Continuity plan along with supporting actions, strategies, and plans.
The consultant will be expected to have a strong background in business continuity and enterprise risk
management, with experience in conducting risk assessments and developing risk management frameworks
and plans. The consultant will also be expected to have excellent analytical and problem-solving skills, strong
communication and interpersonal skills, and experience in developing and implementing business continuity
plans.
Belize Telemedia Limited Page 1
Statement of Work
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
3 Objectives and Scope
This section outlines the general objectives and high-level scope that the Consultant is expected to carry out and
achieve.
The result of the consultancy is the establishment of the following Key Deliverables:
Enterprise Risk Management Framework (Document) – The Framework should be based on
established standards that best align with Digi and the services it provides.
Business Continuity Plan (Document) – The Business Continuity Plan should be comprehensive and
aligned with the Framework but also primarily focused on addressing the risks or groups of related risks
that are of highest impact and probability of occurrence to Digi.
Implementation Plan (Document) – The Implementation Plan should outline how the Enterprise Risk
Management Framework and Business Continuity Plan should be implemented at Digi.
Proposal for Support (Document) – The Proposal for Support to implement should provide a plan,
timeline, costing, etc. of how the consultant can support the organization in the implementation the
Enterprise Risk Management Framework and Business Continuity Plan.
The consultant is expected to carry out all the steps, research, assessments, etc. necessary to achieve the key
deliverables. This includes presenting the information to key stakeholders within the organization to obtain buy-
in and reviewing, modifying and updating the deliverables based on feedback.
The Consultancy is not limited to the above Key Deliverables. The Consultant is expected to include any
additional deliverables, reports, etc. that may be necessary to carry out the consultancy in good faith to ensure
the success of the organization as it relates to Enterprise Risk Management and Business Continuity.
4 Terms of Engagement
This section outlines how the terms of engagement for this consultancy will be established.
4.1 General Duties and Responsibilities
The terms of engagement will be based on the requirements of this Terms of Reference as well as the terms of
the proposal of the Consultant and will be generally based on the following areas:
Duties and Responsibilities: The consultant will be responsible for developing and implementing the
specified deliverables, such as an Enterprise Risk Management Framework and a Business Continuity
Plan. They will conduct necessary research, assessments, and consultations to ensure successful
project outcomes.
Period of Consultancy: The duration of the consultancy will be defined, with specific start and end
dates. Any extension or modification of this period would require mutual agreement between the
consultant and the client.
Deliverables and Outputs: The consultant is expected to produce specific deliverables, such as
detailed reports, frameworks, plans, and implementation strategies. These outputs should meet agreed-
upon standards and be delivered within the specified timelines.
Belize Telemedia Limited Page 2
Statement of Work
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
Reporting Requirements: The consultant will report regularly to a designated point of contact within
the client organization, such as the Chief Operations Officer or another appointed individual. Reports
should include progress updates, challenges encountered, and any changes in the project scope.
Work Modality: The consultant may work remotely or on-site as required by the project. Face-to-face
meetings and presentations may be necessary, and the client will provide support for coordinating such
interactions.
Availability: The consultant must be fully available to complete the project within the agreed timeframe
and be responsive to communications from the client.
4.2 Duties and Responsibilities
To be discussed and mutually agreed on with the Consultant.
4.3 Terms of Payment
To be discussed and mutually agreed on with the Consultant. See Financial Proposal subsection of this
document.
4.4 Confidentiality, Conflict of Interest, and Intellectual Property
The Consultant shall maintain strict confidentiality regarding all information and materials acquired during the
consultancy and shall not disclose them without prior written consent from Digi. The Consultant must avoid and
disclose any conflicts of interest that may arise and shall not engage in any activities that could compromise their
ability to fulfill their contractual obligations. All intellectual property rights generated from the work performed
under the consultancy shall belong exclusively to Digi, and the Consultant agrees to assign all rights to Digi and
refrain from using the intellectual property for any other purposes without explicit written approval.
4.5 Evaluation and Performance Metrics
In general terms, the following table highlights the key areas in that will be the focal points for evaluation and
performance of the Consultant.
# Evaluation Criteria Performance Requirement
Timely Submission of Adherence to the established timelines for all deliverables.
1
Deliverables
Deliverables must meet high standards of accuracy, completeness, and
2 Quality of Work
relevance to Digi's needs.
Active and effective engagement with stakeholders, incorporating their
3 Stakeholder Engagement
input into deliverables.
Flexibility in adjusting to changes in scope or new requirements during
4 Adaptability
the project.
Clear, consistent communication with Digi’s project management team,
5 Effective Communication
including regular updates.
Belize Telemedia Limited Page 3
Statement of Work
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
4.6 Conditions of Work
May include other terms and conditions such as safety protocols, legal compliance, insurance requirements, and
any other policies relevant to the consultancy.
Work Modality: The Consultant is expected to execute the scope of work remotely. However, on a
case-by-case basis, it may be necessary to meet, visit, make a presentation, or work on-site. Digi can
assist with the coordination and face-to-face meetings via our project management team and provide
support to the Consultant where necessary.
Other Terms: Other terms such as health and safety protocols, legal compliance, insurance
requirements, and any other policies, practices or rules are to be discussed and mutually agreed upon.
4.7 Reporting & Availability
The Consultant will work along with Digi’s staff members and other key stakeholders to complete all deliverables.
However, it is ultimately the Consultant's responsibility to deliver within the scope and schedule.
The Consultant reports directly to the Chief Operations Officer or designated person or persons. The Consultant
must be reasonably available to the project and project team during the consultancy period.
4.8 Language Requirements
The following are the languages that the Consultant is expected to know:
Proficiency in both written and spoken English at a very high level is a prerequisite.
Proficiency in spoken Spanish at a reasonable level is an advantage but not a requirement.
5 Qualifications
This section specifies the qualifications and experience required for the consultant, including education, skills, prior
work experience, and other relevant criteria.
5.1 Education & Experience
Education: The Consultant should possess at a minimum a Bachelor's degree in engineering,
business or a related field. A Master’s degree in a related subject matter area is desired.
Experience: The Consultant should have at least 5 years of experience in a leadership role in business
continuity and enterprise risk analysis, preferably in the telecommunications industry or related field.
5.2 Consultancy-Specific Competencies
Professional Background: The Consultant should have extensive, demonstrable experience in risk
management, particularly in developing and implementing risk management frameworks and related
processes.
Qualifications: The Consultant should possess qualifications and certifications such as Certified Risk
Management Professional (CRMP) or Certified Enterprise Risk Manager (CERM) and other indicators
of the consultant's expertise.
Belize Telemedia Limited Page 4
Statement of Work
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
Track Record: The Consultant should be able to demonstrate a track record in successfully
implementing ERM frameworks for other technology organizations. The consultant should be able to
provide references and case studies from previous clients with similar environment, complexity,
challenges, and size.
Comprehensive Methodology: The Consultant should have a well-defined approach to ERM
implementation, including risk identification, assessment, mitigation, monitoring, and reporting.
Customization: The Consultant should be able to tailor their approach to fit the organization’s specific
needs rather than offering a one-size-fits-all solution.
Integration: The Consultant should be adept at integrating the ERM framework with existing processes
and systems within the organization.
Stakeholder Engagement: The consultant should be able to effectively communicate and engage with
stakeholders at all levels of the organization.
Training and Support: They should provide training and support to ensure that the organization can
sustain the ERM framework after implementation.
Tools and Technology: The Consultant should be familiar with and be able to recommend and help to
implement tools and technologies related to ERM.
Data Analysis Skills: The Consultant should have the ability to analyze and interpret risk data and
information to provide actionable insights.
Cultural Fit: The Consultant should understand and respect the organization's culture and work
collaboratively with its members.
Adaptability: The Consultant should be flexible and adaptable to changing circumstances and
requirements.
Value Realization: The Consultant should be able to demonstrate the potential return on investment
and value from implementing the ERM framework.
5.3 General Competencies
The following capabilities are expected of the Consultant:
Working knowledge of the telecommunications and technology industry.
Excellent analytical and problem-solving skills.
Strong interpersonal and communication skills.
Strong analytical, reporting, and writing skills.
Ability to plan, organize, implement, and report on work.
Ability to work under pressure and meet tight deadlines.
Outstanding communication and organizational skills.
Excellent presentation and facilitation skills.
Demonstrates integrity and ethical standards.
Positive, constructive attitude towards work.
Proficiency in the use of office productivity software.
Belize Telemedia Limited Page 5
Statement of Work
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
6 Proposal Submission Guidelines
6.1 Proposal
Interested candidates should submit a proposal outlining their approach to the project, including timelines,
deliverables, and budget requirements. The potential consultant is free to add any additional information that
they may see fit.
6.1.1 Technical Proposal
The Consultant must submit a Technical Proposal describing how he/she plans to achieve the goals and
objectives of the consultancy. The Technical Proposal should contain the following elements:
▪ Introduction & Background
▪ Approach and scope
▪ Deliverables and timeline
▪ Detailed CV’s, case studies, project portfolio, etc. (if available)
▪ References from previous clients (with similar Scope of Works as this ToR)
▪ Any other supporting information and conditions
The following high-level timeline can be used as a guide for the implementation. The proposed timeline is
expected to be more detailed. However, the scope of works proposed must be substantially completed before
the end of March, 2025.
6.1.2 Financial Proposal
The Consultant must submit a Financial Proposal describing the cost of carrying out the goals and objectives as
described in this ToR. The Financial Proposal should contain the following:
▪ A breakdown of costs and expenses.
s
▪ Summary sheet of costs in Belize or US dollars.
The Consultant is asked to be clear and detailed on all costs, including incidental expenses, if any.
Belize Telemedia Limited Page 6
Statement of Work
Enterprise Risk Management Framework Consultancy – Terms of Reference – v.0.2
6.2 Consultant Selection Timeline
The below table shows the timeline for the selection of a suitable candidate. Only shortlisted candidates will be
notified.
Digi reserves the right to select the Consultant and update the selection timeline at its discretion and in its best
interest.
# Activity Date
1 RFP Issued Monday, September 2
2 Deadline for Questions & Clarifications Monday, September 9
3 Feedback Period on Questions & Monday, September 2 to Thursday,
Clarifications September 12
4 Deadline for Proposals Friday, September 13
5 Monday, September 9 to Thursday,
September 12 (proposals will be continuously
Proposal Evaluation Period reviewed as they are submitted)
6 Shortlisted Consultant Interviews (if Monday September 16 to Tuesday
required) September 17
7 Consultant Selection Notification Wednesday September 18
8 Thursday September 19 to Friday September
Contract Review and Signing 27
9 Consultant Start Date Monday September 30
6.3 Proposal Selection Process
Proposal will be assessed on the following aspects and the most suitable candidate will be selected at the
discretion of the organization:
# Activity Date
1 Quality of response to the TOR 15%
2 The proposed approach to deliver the requested work 15%
3 General skills and experience of the candidate 20%
4 Credentials and specific experience on similar projects 20%
5 The proposed costing 30%
Belize Telemedia Limited Page 7
Statement of Work
