[PROPOSAL] - Procurement Framework | Security : Non-Constitutional Proposal (Prev RFP)

[dk3]

tldr; Today, we have begun the Open Consultation Period (7 Days) to gather feedback from any parties we have not been in contact with directly. This is a skeleton of how the process would flow, including a Procurement Committee that would act as a facilitator during the onboarding and engagement periods.

Public Consultation re. 'Consolidate Security Proposals into an RFP Process'

Hello everyone, Immutablelawyer (Joseph) here from [axis advisory]. By way of context, I was recently leading a focus group together with @dk3 so as to spearhead a proposal aimed at creating a ‘Procurement Framework’ for security-oriented service providers in the ArbitrumDAO. Below, please find our public call for your participation in a public consultation phase so as to solicit input on what you, the ArbitrumDAO community member, think of how the Procurement Framework should be structured. I…

Based on the research and outreach conducted this week we have initially scoped out the procurement process, and exploratory ideas are outlined in this post from @Immutablelawyer where details of the ‘Procurement Framework’ to streamline whitelisting security-oriented service providers are shared:

1. Consultation Period: The public consultation phase runs from November 10 to November 17. Community members are invited to provide feedback via a Google Form or by sending directly to Joseph.
2. Framework Components:
   • Needs Assessment: Identifying the types and processes of security services required within the Arbitrum Ecosystem.
   • Potential Eligibility Criteria: Including technical expertise, reputation, certifications, compliance, tools and techniques, financial stability, innovation, and insurance.
   • RFP Publication: Outlining the scope of work, submission guidelines, evaluation criteria, and timelines.
   • Proposal Submission and Evaluation: Detailed documentation, capabilities demonstration, initial screening, technical and commercial evaluation, reference checks, and interviews.
   • Whitelisting, Onboarding, and Contracting: Selecting providers, conducting KYB processes, and negotiating contracts.
   • Performance Monitoring and Review: Regular audits and feedback loops.
   • Renewal and Exit Procedures: Criteria for reassessment and exit strategies.
   • Documentation and Record Keeping: Maintaining an audit trail for accountability.
   • Public Disclosure: Ensuring transparency in the process.
3. Objective: The goal is to establish a fair, transparent, and efficient process for selecting qualified security service providers.
4. Participation and Contact: The community is encouraged to participate in the consultation process, both projects that need security services as well as security service providers, feel free to contact us via TG for any questions or issues.